diff --git a/go.mod b/go.mod index a417c33..72f26ef 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/stacklok/toolhive-core -go 1.27 +go 1.27.0 // Development-only replacement for the untagged nested module. Dependency // module replacements are ignored by downstream consumers. @@ -14,20 +14,36 @@ replace github.com/stacklok/toolhive-core/redisconn/gcp => ./redisconn/gcp require ( cel.dev/cel-go v0.32.0 + github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.1 + github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1 github.com/adrg/xdg v0.5.3 github.com/alicebob/miniredis/v2 v2.39.0 + github.com/aws/aws-sdk-go-v2 v1.47.0 github.com/aws/aws-sdk-go-v2/config v1.33.4 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.20.0 github.com/aws/aws-sdk-go-v2/feature/rds/auth v1.7.3 + github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 + github.com/go-openapi/runtime v0.33.2 + github.com/go-openapi/swag/conv v0.29.2 + github.com/golang-jwt/jwt/v5 v5.3.1 + github.com/google/certificate-transparency-go v1.3.3 github.com/google/go-containerregistry v0.22.1 github.com/google/uuid v1.6.0 + github.com/in-toto/attestation v1.2.0 github.com/jackc/pgx/v5 v5.11.0 + github.com/lestrrat-go/httprc/v3 v3.0.6 + github.com/lestrrat-go/jwx/v3 v3.2.0 github.com/modelcontextprotocol/go-sdk v1.7.0 github.com/modelcontextprotocol/registry v1.8.1 github.com/opencontainers/go-digest v1.0.0 github.com/opencontainers/image-spec v1.1.1 + github.com/prometheus/client_golang v1.24.1 github.com/redis/go-redis/v9 v9.22.0 + github.com/secure-systems-lab/go-securesystemslib v0.11.1 + github.com/shirou/gopsutil/v4 v4.26.8 github.com/sigstore/protobuf-specs v0.5.2 + github.com/sigstore/rekor v1.5.4 + github.com/sigstore/sigstore v1.10.10 github.com/sigstore/sigstore-go v1.3.0 github.com/stacklok/toolhive-core/redisconn v0.0.1 github.com/stacklok/toolhive-core/redisconn/aws v0.0.1 @@ -36,41 +52,22 @@ require ( github.com/stretchr/testify v1.12.1 github.com/xeipuuv/gojsonschema v1.2.0 go.opentelemetry.io/otel v1.46.0 - go.opentelemetry.io/otel/metric v1.46.0 - go.opentelemetry.io/otel/sdk/metric v1.46.0 - go.uber.org/mock v0.6.0 - golang.org/x/net v0.59.0 - gopkg.in/yaml.v3 v3.0.1 - oras.land/oras-go/v2 v2.6.2 -) - -require ( - github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.1 - github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1 - github.com/aws/aws-sdk-go-v2 v1.47.0 - github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 - github.com/go-openapi/runtime v0.33.2 - github.com/go-openapi/swag/conv v0.29.2 - github.com/golang-jwt/jwt/v5 v5.3.1 - github.com/google/certificate-transparency-go v1.3.3 - github.com/in-toto/attestation v1.2.0 - github.com/lestrrat-go/httprc/v3 v3.0.6 - github.com/lestrrat-go/jwx/v3 v3.2.0 - github.com/prometheus/client_golang v1.24.1 - github.com/secure-systems-lab/go-securesystemslib v0.11.1 - github.com/shirou/gopsutil/v4 v4.26.8 - github.com/sigstore/rekor v1.5.4 - github.com/sigstore/sigstore v1.10.9 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.22.0 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.46.0 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0 go.opentelemetry.io/otel/exporters/prometheus v0.68.0 go.opentelemetry.io/otel/log v0.22.0 + go.opentelemetry.io/otel/metric v1.46.0 go.opentelemetry.io/otel/sdk v1.46.0 go.opentelemetry.io/otel/sdk/log v0.22.0 + go.opentelemetry.io/otel/sdk/metric v1.46.0 go.opentelemetry.io/otel/trace v1.46.0 + go.uber.org/mock v0.6.0 + golang.org/x/net v0.59.0 golang.org/x/oauth2 v0.37.0 google.golang.org/protobuf v1.36.12 + gopkg.in/yaml.v3 v3.0.1 + oras.land/oras-go/v2 v2.6.2 ) require ( @@ -103,7 +100,7 @@ require ( github.com/docker/cli v29.7.2+incompatible // indirect github.com/docker/docker-credential-helpers v0.9.3 // indirect github.com/ebitengine/purego v0.10.2 // indirect - github.com/go-jose/go-jose/v4 v4.1.4 // indirect + github.com/go-jose/go-jose/v4 v4.1.5 // indirect github.com/go-logr/logr v1.4.4 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.2.6 // indirect diff --git a/go.sum b/go.sum index a5c9896..9a8af10 100644 --- a/go.sum +++ b/go.sum @@ -125,8 +125,8 @@ github.com/felixge/httpsnoop v1.1.0 h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeO github.com/felixge/httpsnoop v1.1.0/go.mod h1:Zqxgdd+1Rkcz8euOqdr7lqgCRJztwr5hp9vDSi5UZCE= github.com/go-chi/chi/v5 v5.3.1 h1:3j4HZLGZQ3JpMCrPJF/Jl3mYJfWLKBfNJ6quurUGCf8= github.com/go-chi/chi/v5 v5.3.1/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto= -github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA= -github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= +github.com/go-jose/go-jose/v4 v4.1.5 h1:RjgjO2LOtWOJKUC5wpwY9LR3B3vwVAz6JS2YHfYU6eA= +github.com/go-jose/go-jose/v4 v4.1.5/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8= github.com/go-logr/logr v1.4.4/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= @@ -353,8 +353,8 @@ github.com/sigstore/rekor v1.5.4 h1:A9zITTrkRwO+8lfq7L/gBR7rDHHcBQJRI+a0JQo4xDM= github.com/sigstore/rekor v1.5.4/go.mod h1:0bcUHhZPlG+RVW1dI/7sdBp0MiVWVzk9h0tgOH/o0Yc= github.com/sigstore/rekor-tiles/v2 v2.3.0 h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc= github.com/sigstore/rekor-tiles/v2 v2.3.0/go.mod h1:DEFiKSyQ4nF75QRVNdOPaIH3cmvMkO2B6xDZjNYngPc= -github.com/sigstore/sigstore v1.10.9 h1:7Dcpt+ibnltHQZ8XhaU0dFmhHaf/T491eJfA9WDex4Y= -github.com/sigstore/sigstore v1.10.9/go.mod h1:LYW9+qH7bK8wZmLm6lPxIC5lkHtkJDCgkqjChzTAIBs= +github.com/sigstore/sigstore v1.10.10 h1:0hfpqcl1+UnzxuVT4//PzL3LQ8uOCzoF90Ofs5zzBwM= +github.com/sigstore/sigstore v1.10.10/go.mod h1:Q8tpy2X80KVswawYR0eTjWl3gM3AU+ak+h/NtPzRfWs= github.com/sigstore/sigstore-go v1.3.0 h1:hnIMHREyCNTYFtOE1o7ae3Axa9B5W5EjUSBJICP2NBE= github.com/sigstore/sigstore-go v1.3.0/go.mod h1:AyRQXfpH89py1twjE3kEZxlRersng90GSYqQV9zGJE8= github.com/sigstore/sigstore/pkg/signature/kms/aws v1.10.9 h1:2NWAU/utJRwzy1OrQurlY3wlDSynyH1rNJS5GgFchrg= @@ -390,8 +390,8 @@ github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0 h1:xpI5pnEQ0erFCS3JmcEl7Blluo8Zi github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0/go.mod h1:wDDAhjfd1t4TjeJCSsmFK7CARPUs/ITi16ZZ8kmAaFQ= github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0 h1:eXuNqgrcYelxU1MVikOJDP3wTS5lvihM4ntoAbAMfvs= github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0/go.mod h1:3RhcxAqek6xUlRFmJifvU4CYLZN60KMQdIKqpZAZJG0= -github.com/tink-crypto/tink-go/v2 v2.7.0 h1:k7QnUXJ1cRDpvoy/5l1FimZqMAArRff8vjUqzi5N04o= -github.com/tink-crypto/tink-go/v2 v2.7.0/go.mod h1:cWNpQ/yAT/QHzAV0kBGMOSJzzYTKofDZdJaUqOPPWCI= +github.com/tink-crypto/tink-go/v2 v2.8.0 h1:1zODq1bZDqOQdNPjhvwGYLDw9On7mDWPnQf+4xXlpAc= +github.com/tink-crypto/tink-go/v2 v2.8.0/go.mod h1:aNXZeyxjQU9iqAeARRNmbESXUW6Mao1HRCCTY8B1TFM= github.com/transparency-dev/formats v0.1.1 h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI= github.com/transparency-dev/formats v0.1.1/go.mod h1:qtZ8goRuJ8FTBG9c9+Bj0rn2rUG7eG/AUTkr+Aw3jFw= github.com/transparency-dev/merkle v0.0.2 h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4= diff --git a/go.work b/go.work index 8edd6fc..8de988f 100644 --- a/go.work +++ b/go.work @@ -1,4 +1,4 @@ -go 1.27 +go 1.27.0 use ( .