This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `v5.13.1` -> `v5.16.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.16.2`](https://github.com/go-git/go-git/releases/tag/v5.16.2) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2) #### What's Changed - utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by [@​kane8n](https://github.com/kane8n) in https://github.com/go-git/go-git/pull/1567 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2 ### [`v5.16.1`](https://github.com/go-git/go-git/releases/tag/v5.16.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1) #### What's Changed - utils: merkletrie, Fix diff on sparse-checkout index. Fixes [#​1406](https://github.com/go-git/go-git/issues/1406) to releases/v5.x by [@​kane8n](https://github.com/kane8n) in https://github.com/go-git/go-git/pull/1561 #### New Contributors - [@​kane8n](https://github.com/kane8n) made their first contribution in https://github.com/go-git/go-git/pull/1561 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1 ### [`v5.16.0`](https://github.com/go-git/go-git/releases/tag/v5.16.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.15.0...v5.16.0) #### What's Changed - \[v5] plumbing: support mTLS for HTTPS protocol by [@​hiddeco](https://github.com/hiddeco) in https://github.com/go-git/go-git/pull/1510 - v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix [#​1514](https://github.com/go-git/go-git/issues/1514) by [@​pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1515 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.15.0...v5.16.0 ### [`v5.15.0`](https://github.com/go-git/go-git/releases/tag/v5.15.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.14.0...v5.15.0) #### What's Changed - plumbing: add cert auth support to `releases/v5.x` by [@​Javier-varez](https://github.com/Javier-varez) in https://github.com/go-git/go-git/pull/1482 - v5: Bump dependencies by [@​pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1505 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.14.0...v5.15.0 ### [`v5.14.0`](https://github.com/go-git/go-git/releases/tag/v5.14.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0) #### What's Changed - v5: Bump Go and dependencies to mitigate [GO-2025-3487](https://pkg.go.dev/vuln/GO-2025-3487) by [@​pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1436 ⚠️ Note that this version requires Go 1.23, due to the bump to `golang.org/x/crypto@v0.35.0` which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release. **Full Changelog**: https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0 ### [`v5.13.2`](https://github.com/go-git/go-git/releases/tag/v5.13.2) [Compare Source](https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2) #### What's Changed - plumbing: use the correct user agent string. Fixes [#​883](https://github.com/go-git/go-git/issues/883) by [@​uragirii](https://github.com/uragirii) in https://github.com/go-git/go-git/pull/1364 - build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1365 - build: bump the golang-org group with 2 updates by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1367 - build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1368 - build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1378 - build: bump github/codeql-action from 3.28.0 to 3.28.1 by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1376 - build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1377 - git: worktree, fix restoring dot slash files (backported to v5). Fixes [#​1176](https://github.com/go-git/go-git/issues/1176) by [@​BeChris](https://github.com/BeChris) in https://github.com/go-git/go-git/pull/1361 - build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1392 - git: worktree\_status, fix adding dot slash files to working tree (backported to v5). Fixes [#​1150](https://github.com/go-git/go-git/issues/1150) by [@​BeChris](https://github.com/BeChris) in https://github.com/go-git/go-git/pull/1359 - build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by [@​dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/1383 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS40My41IiwidXBkYXRlZEluVmVyIjoiNDEuNDMuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/800 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
109 lines
4.7 KiB
Modula-2
109 lines
4.7 KiB
Modula-2
module code.forgejo.org/forgejo/runner/v9
|
|
|
|
go 1.23.0
|
|
|
|
toolchain go1.23.11
|
|
|
|
require (
|
|
code.forgejo.org/forgejo/actions-proto v0.5.1
|
|
connectrpc.com/connect v1.18.1
|
|
github.com/Masterminds/semver v1.5.0
|
|
github.com/avast/retry-go/v4 v4.6.1
|
|
github.com/containerd/errdefs v0.3.0
|
|
github.com/creack/pty v1.1.24
|
|
github.com/distribution/reference v0.6.0
|
|
github.com/docker/cli v28.3.3+incompatible
|
|
github.com/docker/docker v28.3.3+incompatible
|
|
github.com/docker/go-connections v0.5.0
|
|
github.com/go-git/go-billy/v5 v5.6.2
|
|
github.com/go-git/go-git/v5 v5.16.2
|
|
github.com/gobwas/glob v0.2.3
|
|
github.com/google/uuid v1.6.0
|
|
github.com/imdario/mergo v0.3.16
|
|
github.com/joho/godotenv v1.5.1
|
|
github.com/julienschmidt/httprouter v1.3.0
|
|
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
|
|
github.com/mattn/go-isatty v0.0.20
|
|
github.com/moby/go-archive v0.1.0
|
|
github.com/moby/patternmatcher v0.6.0
|
|
github.com/opencontainers/image-spec v1.1.1
|
|
github.com/opencontainers/selinux v1.11.0
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/rhysd/actionlint v1.7.7
|
|
github.com/sirupsen/logrus v1.9.3
|
|
github.com/spf13/cobra v1.9.1
|
|
github.com/spf13/pflag v1.0.7
|
|
github.com/stretchr/testify v1.10.0
|
|
github.com/timshannon/bolthold v0.0.0-20240314194003-30aac6950928
|
|
go.etcd.io/bbolt v1.4.2
|
|
golang.org/x/term v0.33.0
|
|
golang.org/x/time v0.12.0
|
|
google.golang.org/protobuf v1.36.6
|
|
gopkg.in/yaml.v3 v3.0.1
|
|
gotest.tools/v3 v3.5.2
|
|
)
|
|
|
|
require (
|
|
dario.cat/mergo v1.0.0 // indirect
|
|
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
|
|
github.com/Microsoft/go-winio v0.6.2 // indirect
|
|
github.com/ProtonMail/go-crypto v1.1.6 // indirect
|
|
github.com/bmatcuk/doublestar/v4 v4.8.0 // indirect
|
|
github.com/cloudflare/circl v1.6.1 // indirect
|
|
github.com/containerd/errdefs/pkg v0.3.0 // indirect
|
|
github.com/containerd/log v0.1.0 // indirect
|
|
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/docker/docker-credential-helpers v0.8.0 // indirect
|
|
github.com/docker/go-units v0.5.0 // indirect
|
|
github.com/emirpasic/gods v1.18.1 // indirect
|
|
github.com/fatih/color v1.18.0 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
|
|
github.com/go-logr/logr v1.4.2 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-viper/mapstructure/v2 v2.3.0 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
github.com/kevinburke/ssh_config v1.2.0 // indirect
|
|
github.com/klauspost/compress v1.18.0 // indirect
|
|
github.com/mattn/go-colorable v0.1.14 // indirect
|
|
github.com/mattn/go-runewidth v0.0.16 // indirect
|
|
github.com/mattn/go-shellwords v1.0.12 // indirect
|
|
github.com/moby/docker-image-spec v1.3.1 // indirect
|
|
github.com/moby/sys/atomicwriter v0.1.0 // indirect
|
|
github.com/moby/sys/sequential v0.6.0 // indirect
|
|
github.com/moby/sys/user v0.4.0 // indirect
|
|
github.com/moby/sys/userns v0.1.0 // indirect
|
|
github.com/moby/term v0.5.0 // indirect
|
|
github.com/morikuni/aec v1.0.0 // indirect
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
|
github.com/pjbgf/sha1cd v0.3.2 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/rivo/uniseg v0.4.7 // indirect
|
|
github.com/robfig/cron/v3 v3.0.1 // indirect
|
|
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
|
|
github.com/skeema/knownhosts v1.3.1 // indirect
|
|
github.com/stretchr/objx v0.5.2 // indirect
|
|
github.com/xanzy/ssh-agent v0.3.3 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 // indirect
|
|
go.opentelemetry.io/otel v1.36.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.36.0 // indirect
|
|
go.opentelemetry.io/otel/sdk v1.21.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.36.0 // indirect
|
|
golang.org/x/crypto v0.37.0 // indirect
|
|
golang.org/x/net v0.39.0 // indirect
|
|
golang.org/x/sync v0.12.0 // indirect
|
|
golang.org/x/sys v0.34.0 // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20231120223509-83a465c0220f // indirect
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
|
)
|