dependabot[bot]
d227e1f18f
bump github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.0 in the go_modules group across 1 directory ( #457 )
...
* Bump github.com/nwaples/rardecode/v2
Bumps the go_modules group with 1 update in the / directory: [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode ).
Updates `github.com/nwaples/rardecode/v2` from 2.1.1 to 2.2.0
- [Commits](https://github.com/nwaples/rardecode/compare/v2.1.1...v2.2.0 )
---
updated-dependencies:
- dependency-name: github.com/nwaples/rardecode/v2
dependency-version: 2.2.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
* fixed versions/dependencies for rardecode and archives
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-10-22 18:55:51 -04:00
Adam Martin
33a9bb3f78
update oras-go to v1.2.7 for security patches ( #464 )
...
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-22 13:42:25 -04:00
Adam Martin
344c008607
update cosign to v3.0.2+hauler.1 ( #463 )
...
signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-10-22 12:48:56 -04:00
dependabot[bot]
0fafca87f9
bump the go_modules group across 1 directory with 2 updates ( #455 )
...
bumps the go_modules group with 2 updates in the / directory: [github.com/docker/docker](https://github.com/docker/docker ) and [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure ).
updates `github.com/docker/docker` from 28.2.2+incompatible to 28.3.3+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v28.2.2...v28.3.3 )
updates `github.com/go-viper/mapstructure/v2` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/go-viper/mapstructure/releases )
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-version: 28.3.3+incompatible
dependency-type: indirect
dependency-group: go_modules
- dependency-name: github.com/go-viper/mapstructure/v2
dependency-version: 2.4.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-02 16:04:36 -04:00
Zack Brady
38e676e934
upgraded versions/dependencies/deprecations ( #454 )
...
* upgrade go versions/dependencies
* updated deprecated goreleaser code for homebrew
* updated deprecated goreleaser code for docker
2025-10-02 14:23:22 -04:00
dependabot[bot]
acbd1f1b6a
bump the go_modules group across 1 directory with 2 updates ( #449 )
...
bumps the go_modules group with 2 updates in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm ) and [github.com/docker/docker](https://github.com/docker/docker ).
updates `helm.sh/helm/v3` from 3.18.4 to 3.18.5
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.18.4...v3.18.5 )
updates `github.com/docker/docker` from 27.5.0+incompatible to 28.0.0+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.5.0...v28.0.0 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.18.5
dependency-type: direct:production
dependency-group: go_modules
- dependency-name: github.com/docker/docker
dependency-version: 28.0.0+incompatible
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-24 21:24:58 -04:00
Zack Brady
3e44c53b75
upgraded go and dependencies versions ( #444 )
...
* upgraded go version
* upgraded dependencies
2025-07-11 11:49:01 -04:00
dependabot[bot]
062bb3ff2c
Bump github.com/go-viper/mapstructure/v2 ( #442 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure ).
Updates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.3.0
- [Release notes](https://github.com/go-viper/mapstructure/releases )
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0 )
---
updated-dependencies:
- dependency-name: github.com/go-viper/mapstructure/v2
dependency-version: 2.3.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-02 14:37:59 -04:00
dependabot[bot]
c8b4e80371
bump github.com/cloudflare/circl ( #441 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl ).
Updates `github.com/cloudflare/circl` from 1.3.7 to 1.6.1
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.7...v1.6.1 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-version: 1.6.1
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-11 00:45:29 -04:00
Zack Brady
d86957bf20
deprecate auth from hauler store copy ( #440 )
2025-06-05 14:07:53 -04:00
dependabot[bot]
4a6fc8cec2
Bump github.com/open-policy-agent/opa ( #438 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ).
Updates `github.com/open-policy-agent/opa` from 1.1.0 to 1.4.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.1.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
dependency-version: 1.4.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 12:34:17 -04:00
dependabot[bot]
b7b599e6ed
bump golang.org/x/net in the go_modules group across 1 directory ( #433 )
...
bumps the go_modules group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net ).
Updates `golang.org/x/net` from 0.37.0 to 0.38.0
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.38.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-04-30 22:21:37 -04:00
dependabot[bot]
4d0b407452
bump helm.sh/helm/v3 in the go_modules group across 1 directory ( #430 )
...
bumps the go_modules group with 1 update in the / directory: [helm.sh/helm/v3](https://github.com/helm/helm ).
Updates `helm.sh/helm/v3` from 3.17.0 to 3.17.3
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.17.0...v3.17.3 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-version: 3.17.3
dependency-type: direct:production
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-11 00:16:05 -05:00
Adam Martin
3b96a95a94
add --only flag to hauler store copy (for images) ( #429 )
...
* bump cosign fork and tidy
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* add --only to hauler store copy
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2025-04-08 09:27:12 -04:00
dependabot[bot]
01bf58de03
bump github.com/golang-jwt/jwt/v4 ( #423 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt ).
Updates `github.com/golang-jwt/jwt/v4` from 4.5.1 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 15:09:34 -04:00
dependabot[bot]
38b979d0c5
bump the go_modules group across 1 directory with 2 updates ( #422 )
...
bumps the go_modules group with 2 updates in the / directory: [github.com/containerd/containerd](https://github.com/containerd/containerd ) and [golang.org/x/net](https://github.com/golang/net ).
Updates `github.com/containerd/containerd` from 1.7.24 to 1.7.27
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.24...v1.7.27 )
Updates `golang.org/x/net` from 0.33.0 to 0.36.0
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
dependency-group: go_modules
- dependency-name: golang.org/x/net
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 11:52:25 -04:00
dependabot[bot]
7de20a1f15
bump github.com/go-jose/go-jose/v3 ( #417 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose ).
Updates `github.com/go-jose/go-jose/v3` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 23:14:27 -04:00
dependabot[bot]
088fde5aa9
bump github.com/go-jose/go-jose/v4 ( #415 )
...
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ).
updates `github.com/go-jose/go-jose/v4` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-28 03:29:02 -05:00
Zack Brady
938914ba5c
upgraded api update to v1/updated dependencies ( #400 )
...
* initial api update to v1
* updated dependencies
* updated manifests
* last bit of updates
* fixed manifest typo
* added deprecation warning
2025-02-04 21:36:20 -05:00
Adam Martin
37032f5379
fix for correctly grabbing platform post cosign 2.4 updates ( #393 )
2025-01-27 18:44:11 -05:00
Adam Martin
ec9ac48476
use cosign v2.4.1+carbide.2 to address containerd annotation in index.json ( #390 )
2025-01-19 10:32:12 -05:00
dependabot[bot]
5f5cd64c2f
Bump the go_modules group across 1 directory with 2 updates ( #385 )
2025-01-10 19:59:36 -05:00
Adam Martin
882713b725
replace mholt/archiver with mholt/archives ( #384 )
2025-01-10 19:15:00 -05:00
Adam Martin
a20d7bf950
forked cosign bump to 2.4.1 and use as a library vs embedded binary ( #383 )
...
* only ignore project-root/store not all store paths
* remove embedded cosign binary in favor of fork library
2025-01-10 17:14:44 -05:00
Zack Brady
e97adcdfed
cleaned up registry and improved logging ( #378 )
...
* cleaned up registry and improved logging
* last bit of logging improvements/import clean up
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2025-01-09 15:21:03 -05:00
dependabot[bot]
cc17b030a9
Bump golang.org/x/crypto in the go_modules group across 1 directory ( #377 )
...
Bumps the go_modules group with 1 update in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto ).
Updates `golang.org/x/crypto` from 0.28.0 to 0.31.0
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-14 01:02:58 -05:00
Zack Brady
74aa40c69b
updated versions for go/k8s/helm ( #373 )
2024-12-04 16:10:36 -05:00
Zack Brady
fb100a27ac
updated dependencies for go, helm, and k8s ( #351 )
...
* updated dependencies for go, helm, and k8s
* fixed dependency version for k8s
2024-11-01 17:06:13 -04:00
Jacob Blain Christen
41d88954c6
bump: golang >= 1.23.1 ( #328 )
...
Signed-off-by: Jacob Blain Christen <jacob.blain.christen@ranchergovernment.com >
2024-09-24 11:27:28 -07:00
Jacob Blain Christen
16fa03fec8
github.com/rancherfederal/hauler => hauler.dev/go/hauler ( #311 )
2024-08-26 13:54:06 -07:00
dependabot[bot]
3f64914097
bump github.com/docker/docker in the go_modules group across 1 directory ( #281 )
...
Bumps the go_modules group with 1 update in the / directory: [github.com/docker/docker](https://github.com/docker/docker ).
Updates `github.com/docker/docker` from 25.0.5+incompatible to 25.0.6+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v25.0.5...v25.0.6 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2024-08-01 17:51:34 -04:00
dependabot[bot]
ef31984c97
Bump golang.org/x/net from 0.17.0 to 0.23.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.17.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-23 19:46:05 +00:00
Adam Martin
29367c152e
Merge pull request #213 from rancherfederal/dependabot/go_modules/google.golang.org/protobuf-1.33.0
...
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
2024-03-26 14:58:08 -04:00
dependabot[bot]
b6c78d3925
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
...
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-26 13:04:41 +00:00
dependabot[bot]
e718d40744
Bump github.com/docker/docker
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 25.0.1+incompatible to 25.0.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v25.0.1...v25.0.5 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-26 13:03:05 +00:00
dependabot[bot]
9cdab516f0
Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.14.1 to 3.14.2.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.14.1...v3.14.2 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-27 00:21:10 +00:00
dependabot[bot]
4759879a5d
Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.14.0 to 3.14.1.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.14.0...v3.14.1 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-16 04:48:57 +00:00
Adam Martin
1ae496fb8b
dep bumps for security vuln fixes
...
Signed-off-by: Adam Martin <adam.martin@rancherfederal.com >
2024-01-30 14:41:33 -05:00
Adam Martin
6e3d3fc7b8
updated store info to handle multi arch images
...
Signed-off-by: Adam Martin <adam.martin@rancherfederal.com >
2023-12-14 11:15:37 -05:00
Adam Martin
4d950f7b0a
Add OCI hauler manifests. ( #136 )
...
* pull carbide flavored hauler manifests from reg
* remove temp constant
* remove temp hardcoding
* add comments for new sync flags
* fixes for version and registry serve
* band-aid for store info... needs love
* add sbom to info logic
* adjust a few text descriptions
* adjust tag names with +
* removed testing file
Signed-off-by: Adam Martin <adam.martin@rancherfederal.com >
2023-11-03 12:44:05 -07:00
Adam Martin
f2b0c44af3
polish up cosign verify for hauler store sync
...
Signed-off-by: Adam Martin <adam.martin@rancherfederal.com >
2023-10-12 12:05:35 -04:00
Adam Martin
356c46fe28
update go.mod
...
Signed-off-by: Adam Martin <adam.martin@rancherfederal.com >
2023-10-12 10:34:40 -04:00
Adam Martin
fe7122da8a
update dependencies
2023-10-06 14:53:17 -04:00
Josh Wolf
c341929a57
add optional args to file name generation and discovery
2022-01-25 08:07:43 -07:00
Josh Wolf
a1be863812
update helm dependency to 3.8.0
2022-01-24 16:29:57 -07:00
Matt Nikkel
6d9270106b
Add ImageTxt collection + storing logic
2022-01-13 13:43:22 -05:00
Josh Wolf
39dc1aac23
ensure charts are always given a version tag
2022-01-12 11:32:26 -07:00
Josh Wolf
8b372d8a20
factor out core oci logic into independent library (rancherfederal/ocil)
2022-01-12 09:47:09 -07:00
Josh Wolf
1030ed92a8
add some standardization to referencing unreferenced content
2021-12-13 13:23:08 -07:00
Josh Wolf
a8e9d853db
update dependencies to play nicely with controller-manager
2021-12-03 23:10:55 -07:00