|
1 | 1 | module github.com/ossf/malicious-packages
|
2 | 2 |
|
3 | 3 | go 1.23.4
|
| 4 | +toolchain go1.24.1 |
4 | 5 |
|
5 | 6 | require (
|
6 | 7 | cloud.google.com/go/storage v1.51.0
|
7 | 8 | github.com/aws/aws-sdk-go v1.55.6
|
8 |
| - github.com/aws/aws-sdk-go-v2/service/s3 v1.78.2 |
| 9 | + github.com/aws/aws-sdk-go-v2/service/s3 v1.79.1 |
9 | 10 | github.com/google/osv-scanner v1.9.2
|
10 | 11 | github.com/google/renameio v1.0.1
|
11 |
| - gocloud.dev v0.40.0 |
| 12 | + gocloud.dev v0.41.0 |
12 | 13 | gopkg.in/yaml.v3 v3.0.1
|
13 | 14 | )
|
14 | 15 |
|
15 | 16 | require (
|
16 |
| - cel.dev/expr v0.19.2 // indirect |
17 |
| - cloud.google.com/go v0.118.3 // indirect |
| 17 | + cel.dev/expr v0.22.1 // indirect |
| 18 | + cloud.google.com/go v0.120.0 // indirect |
18 | 19 | cloud.google.com/go/auth v0.15.0 // indirect
|
19 |
| - cloud.google.com/go/auth/oauth2adapt v0.2.7 // indirect |
| 20 | + cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect |
20 | 21 | cloud.google.com/go/compute/metadata v0.6.0 // indirect
|
21 |
| - cloud.google.com/go/iam v1.4.1 // indirect |
22 |
| - cloud.google.com/go/monitoring v1.24.0 // indirect |
23 |
| - github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0 // indirect |
| 22 | + cloud.google.com/go/iam v1.4.2 // indirect |
| 23 | + cloud.google.com/go/monitoring v1.24.1 // indirect |
| 24 | + github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 // indirect |
24 | 25 | github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.51.0 // indirect
|
25 | 26 | github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.51.0 // indirect
|
26 | 27 | github.com/aws/aws-sdk-go-v2 v1.36.3 // indirect
|
27 | 28 | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 // indirect
|
28 |
| - github.com/aws/aws-sdk-go-v2/config v1.27.27 // indirect |
29 |
| - github.com/aws/aws-sdk-go-v2/credentials v1.17.27 // indirect |
30 |
| - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 // indirect |
31 |
| - github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.10 // indirect |
| 29 | + github.com/aws/aws-sdk-go-v2/config v1.29.12 // indirect |
| 30 | + github.com/aws/aws-sdk-go-v2/credentials v1.17.65 // indirect |
| 31 | + github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect |
| 32 | + github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.69 // indirect |
32 | 33 | github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
|
33 | 34 | github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
|
34 |
| - github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect |
| 35 | + github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect |
35 | 36 | github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 // indirect
|
36 | 37 | github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
|
37 | 38 | github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.0 // indirect
|
38 | 39 | github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
|
39 | 40 | github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 // indirect
|
40 |
| - github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 // indirect |
41 |
| - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect |
42 |
| - github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect |
43 |
| - github.com/aws/smithy-go v1.22.2 // indirect |
| 41 | + github.com/aws/aws-sdk-go-v2/service/sso v1.25.2 // indirect |
| 42 | + github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.0 // indirect |
| 43 | + github.com/aws/aws-sdk-go-v2/service/sts v1.33.17 // indirect |
| 44 | + github.com/aws/smithy-go v1.22.3 // indirect |
44 | 45 | github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
45 |
| - github.com/cncf/xds/go v0.0.0-20250121191232-2f005788dc42 // indirect |
| 46 | + github.com/cncf/xds/go v0.0.0-20250326154945-ae57f3c0d45f // indirect |
46 | 47 | github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
|
47 | 48 | github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
|
48 | 49 | github.com/felixge/httpsnoop v1.0.4 // indirect
|
49 | 50 | github.com/go-logr/logr v1.4.2 // indirect
|
50 | 51 | github.com/go-logr/stdr v1.2.2 // indirect
|
51 |
| - github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect |
| 52 | + github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect |
52 | 53 | github.com/google/s2a-go v0.1.9 // indirect
|
53 | 54 | github.com/google/uuid v1.6.0 // indirect
|
54 | 55 | github.com/google/wire v0.6.0 // indirect
|
55 |
| - github.com/googleapis/enterprise-certificate-proxy v0.3.5 // indirect |
| 56 | + github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect |
56 | 57 | github.com/googleapis/gax-go/v2 v2.14.1 // indirect
|
57 | 58 | github.com/jmespath/go-jmespath v0.4.0 // indirect
|
58 | 59 | github.com/package-url/packageurl-go v0.1.3 // indirect
|
59 | 60 | github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
|
60 | 61 | go.opencensus.io v0.24.0 // indirect
|
61 | 62 | go.opentelemetry.io/auto/sdk v1.1.0 // indirect
|
62 |
| - go.opentelemetry.io/contrib/detectors/gcp v1.34.0 // indirect |
63 |
| - go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect |
64 |
| - go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect |
65 |
| - go.opentelemetry.io/otel v1.34.0 // indirect |
66 |
| - go.opentelemetry.io/otel/metric v1.34.0 // indirect |
67 |
| - go.opentelemetry.io/otel/sdk v1.34.0 // indirect |
68 |
| - go.opentelemetry.io/otel/sdk/metric v1.34.0 // indirect |
69 |
| - go.opentelemetry.io/otel/trace v1.34.0 // indirect |
70 |
| - golang.org/x/crypto v0.35.0 // indirect |
71 |
| - golang.org/x/net v0.36.0 // indirect |
| 63 | + go.opentelemetry.io/contrib/detectors/gcp v1.35.0 // indirect |
| 64 | + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 // indirect |
| 65 | + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect |
| 66 | + go.opentelemetry.io/otel v1.35.0 // indirect |
| 67 | + go.opentelemetry.io/otel/metric v1.35.0 // indirect |
| 68 | + go.opentelemetry.io/otel/sdk v1.35.0 // indirect |
| 69 | + go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect |
| 70 | + go.opentelemetry.io/otel/trace v1.35.0 // indirect |
| 71 | + golang.org/x/crypto v0.36.0 // indirect |
| 72 | + golang.org/x/net v0.38.0 // indirect |
72 | 73 | golang.org/x/oauth2 v0.28.0 // indirect
|
73 | 74 | golang.org/x/sync v0.12.0 // indirect
|
74 |
| - golang.org/x/sys v0.30.0 // indirect |
75 |
| - golang.org/x/text v0.22.0 // indirect |
76 |
| - golang.org/x/time v0.10.0 // indirect |
77 |
| - golang.org/x/xerrors v0.0.0-20240716161551-93cc26a95ae9 // indirect |
78 |
| - google.golang.org/api v0.224.0 // indirect |
79 |
| - google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb // indirect |
80 |
| - google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect |
81 |
| - google.golang.org/genproto/googleapis/rpc v0.0.0-20250303144028-a0af3efb3deb // indirect |
| 75 | + golang.org/x/sys v0.31.0 // indirect |
| 76 | + golang.org/x/text v0.23.0 // indirect |
| 77 | + golang.org/x/time v0.11.0 // indirect |
| 78 | + golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect |
| 79 | + google.golang.org/api v0.228.0 // indirect |
| 80 | + google.golang.org/genproto v0.0.0-20250324211829-b45e905df463 // indirect |
| 81 | + google.golang.org/genproto/googleapis/api v0.0.0-20250324211829-b45e905df463 // indirect |
| 82 | + google.golang.org/genproto/googleapis/rpc v0.0.0-20250324211829-b45e905df463 // indirect |
82 | 83 | google.golang.org/grpc v1.71.0 // indirect
|
83 |
| - google.golang.org/protobuf v1.36.5 // indirect |
| 84 | + google.golang.org/protobuf v1.36.6 // indirect |
84 | 85 | )
|
85 | 86 |
|
86 | 87 | exclude google.golang.org/grpc v1.69.0
|
0 commit comments