From e577dec1df2b2988c29d99622231d6eedb51c51a Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 1 Dec 2025 09:45:36 +0000 Subject: [PATCH] chore: update dependencies Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- internal/grype-scan/go.mod | 10 +++++----- internal/grype-scan/go.sum | 2 ++ misc/vars.yaml | 2 +- network/vars.yaml | 2 +- storage/vars.yaml | 2 +- 5 files changed, 10 insertions(+), 8 deletions(-) diff --git a/internal/grype-scan/go.mod b/internal/grype-scan/go.mod index 4b26b3a6..f3aa13c3 100644 --- a/internal/grype-scan/go.mod +++ b/internal/grype-scan/go.mod @@ -9,11 +9,11 @@ tool ( replace ( // Changes from https://github.com/anchore/grype/pull/2798 for using VEX with SBOM - github.com/anchore/grype => github.com/dsseng/grype v0.96.1-0.20250718094733-2197792a3b26 + github.com/anchore/grype => github.com/dsseng/grype v0.95.1-0.20250710124245-9b7e8e23d161 // Changes from https://github.com/anchore/syft/pull/3932 for deterministic SBOM - github.com/anchore/syft => github.com/dsseng/syft v1.26.2-0.20250703101014-f39c35d156d9 + github.com/anchore/syft => github.com/dsseng/syft v1.28.0 // HACK: required by some dependency of syft, no longer available - github.com/garyburd/redigo => github.com/gomodule/redigo v0.0.0-20150301180006-535138d7bcd7 + github.com/garyburd/redigo => github.com/gomodule/redigo v1.9.3 ) require ( @@ -59,10 +59,10 @@ require ( github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect github.com/anchore/go-sync v0.0.0-20250326131806-4eda43a485b6 // indirect github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 // indirect - github.com/anchore/grype v0.0.0-00010101000000-000000000000 // indirect + github.com/anchore/grype v0.104.1 // indirect github.com/anchore/packageurl-go v0.1.1-0.20250220190351-d62adb6e1115 // indirect github.com/anchore/stereoscope v0.1.6 // indirect - github.com/anchore/syft v1.28.0 // indirect + github.com/anchore/syft v1.38.0 // indirect github.com/andybalholm/brotli v1.1.2-0.20250424173009-453214e765f3 // indirect github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect github.com/aquasecurity/go-pep440-version v0.0.1 // indirect diff --git a/internal/grype-scan/go.sum b/internal/grype-scan/go.sum index f91d5e33..34040563 100644 --- a/internal/grype-scan/go.sum +++ b/internal/grype-scan/go.sum @@ -891,10 +891,12 @@ github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3 github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 h1:2tV76y6Q9BB+NEBasnqvs7e49aEBFI8ejC89PSnWH+4= github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707/go.mod h1:qssHWj60/X5sZFNxpG4HBPDHVqxNm4DfnCKgrbZOT+s= github.com/dsnet/golib v0.0.0-20171103203638-1ea166775780/go.mod h1:Lj+Z9rebOhdfkVLjJ8T6VcRQv3SXugXy999NBtR9aFY= +github.com/dsseng/grype v0.95.1-0.20250710124245-9b7e8e23d161/go.mod h1:r00SpDeaLS4r8CbMSSOgcIOixkA/aU/ak1GQcacVIlk= github.com/dsseng/grype v0.96.1-0.20250718094733-2197792a3b26 h1:Pgz4mR5Q5S1EkJXBoKSMY5r8/CgquO62lBcaG3y0SyE= github.com/dsseng/grype v0.96.1-0.20250718094733-2197792a3b26/go.mod h1:C4G3Bo5V7fH11xAGdjhRrroYLkw+fmXWpQyuggqVuiM= github.com/dsseng/syft v1.26.2-0.20250703101014-f39c35d156d9 h1:oG9Q5NQkAJ5F+yHL7oNH1U1xH7KtZn96Th2Pg4CoyD8= github.com/dsseng/syft v1.26.2-0.20250703101014-f39c35d156d9/go.mod h1:jGpfAy5lRvOUrOxWAfbbu9t3TK8VwJpAAJHz6HFQofw= +github.com/dsseng/syft v1.28.0/go.mod h1:jGpfAy5lRvOUrOxWAfbbu9t3TK8VwJpAAJHz6HFQofw= github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= diff --git a/misc/vars.yaml b/misc/vars.yaml index f868bc76..b70af724 100644 --- a/misc/vars.yaml +++ b/misc/vars.yaml @@ -1,4 +1,4 @@ # renovate: datasource=git-tags extractVersion=^glibc-(?.*)$ depName=https://sourceware.org/git/glibc.git -GLIBC_VERSION: 2.41 +GLIBC_VERSION: 2.42 GLIBC_SHA256: a5a26b22f545d6b7d7b3dd828e11e428f24f4fac43c934fb071b6a7d0828e901 GLIBC_SHA512: 894a3e5a796bc13df30c26a5bfbe4d60b5dbdaac54e7763432235124b547070c7dda88c50584536870cab79183d8cad73a3ac6ed09bfe54fa8482aad07253169 diff --git a/network/vars.yaml b/network/vars.yaml index f9e4b627..efb19da3 100644 --- a/network/vars.yaml +++ b/network/vars.yaml @@ -25,6 +25,6 @@ NEWT_VERSION: 1.6.0 NEWT_SHA256: 71d3b27e2802c6b0f42aef3badf58e3599360d54a836195836e93214fda7dc93 NEWT_SHA512: 021cb93f8616a907f5d0d2e5c2979cc28669042b2cc77322633a23e49cae48e0498904536745f03fdeed03f23543d68fbd76dd6a04ca507585b6dc49b7e131a3 # renovate: datasource=github-releases extractVersion=^v(?.*)$ depName=netbirdio/netbird -NETBIRD_VERSION: 0.60.2 +NETBIRD_VERSION: 0.60.4 NETBIRD_SHA256: e3ec023aff48d86ed1302708aa0522f610ec02891da8f24e6d98b9e9680bbc4e NETBIRD_SHA512: 8bebc0412932eb0c278749b282bae366ff032ca95c5e9032ad54e84e91b47c6f530c4f4bcf9d5843fdd4025516efdad46913f73d18976b177c2534bd7258affe diff --git a/storage/vars.yaml b/storage/vars.yaml index f114da7e..3f75be72 100644 --- a/storage/vars.yaml +++ b/storage/vars.yaml @@ -15,6 +15,6 @@ LIBEVENT_VERSION: 2.1.12 LIBEVENT_SHA256: 92e6de1be9ec176428fd2367677e61ceffc2ee1cb119035037a27d346b0403bb LIBEVENT_SHA512: 88d8944cd75cbe78bc4e56a6741ca67c017a3686d5349100f1c74f8a68ac0b6410ce64dff160be4a4ba0696ee29540dfed59aaf3c9a02f0c164b00307fcfe84f # renovate: datasource=github-tags extractVersion=^version-(?.*)$ depName=sqlite/sqlite -SQLITE_VERSION: 3.51.0 +SQLITE_VERSION: 3.51.1 SQLITE_SHA256: e6c9cc39bc79c433f49a12db9f9270b85e223ecbd8d5ff1ec12d4a36d72c50ec SQLITE_SHA512: 17cb6911ff5bc99e19a45d8ee247b4eda8018db03a479da41ade138be7f0783253687631ef1895046358c8ac6f36385f8df726accf2ca82c3e2b88a9b0ab9b2c