diff --git a/.github/workflows/call_issue_pr_tracker.yml b/.github/workflows/call_issue_pr_tracker.yml index 2c30784..d07cf12 100755 --- a/.github/workflows/call_issue_pr_tracker.yml +++ b/.github/workflows/call_issue_pr_tracker.yml @@ -8,6 +8,9 @@ on: pull_request_review: types: [submitted,edited,dismissed] +permissions: + contents: read + jobs: manage-project: permissions: diff --git a/.github/workflows/call_issues_cron.yml b/.github/workflows/call_issues_cron.yml index 2b962ad..22be2ed 100755 --- a/.github/workflows/call_issues_cron.yml +++ b/.github/workflows/call_issues_cron.yml @@ -4,6 +4,9 @@ on: - cron: '52 17 * * *' workflow_dispatch: +permissions: + contents: read + jobs: stale: permissions: diff --git a/.github/workflows/external_trigger.yml b/.github/workflows/external_trigger.yml index e884304..917bbea 100644 --- a/.github/workflows/external_trigger.yml +++ b/.github/workflows/external_trigger.yml @@ -3,6 +3,9 @@ name: External Trigger Main on: workflow_dispatch: +permissions: + contents: read + jobs: external-trigger-main: runs-on: ubuntu-latest @@ -43,8 +46,8 @@ jobs: "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} exit 1 fi - EXT_RELEASE=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g') - echo "External version: \`${EXT_RELEASE}\`" >> $GITHUB_STEP_SUMMARY + EXT_RELEASE_SANITIZED=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g') + echo "Sanitized external version: \`${EXT_RELEASE_SANITIZED}\`" >> $GITHUB_STEP_SUMMARY echo "Retrieving last pushed version" >> $GITHUB_STEP_SUMMARY image="linuxserver/audacity" tag="latest" @@ -100,8 +103,8 @@ jobs: exit 1 fi echo "Last pushed version: \`${IMAGE_VERSION}\`" >> $GITHUB_STEP_SUMMARY - if [ "${EXT_RELEASE}" == "${IMAGE_VERSION}" ]; then - echo "Version \`${EXT_RELEASE}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY + if [ "${EXT_RELEASE_SANITIZED}" == "${IMAGE_VERSION}" ]; then + echo "Sanitized version \`${EXT_RELEASE_SANITIZED}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY exit 0 elif [ $(curl -s https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-audacity/job/main/lastBuild/api/json | jq -r '.building') == "true" ]; then echo "New version \`${EXT_RELEASE}\` found; but there already seems to be an active build on Jenkins; exiting" >> $GITHUB_STEP_SUMMARY @@ -116,7 +119,7 @@ jobs: "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} else printf "\n## Trigger new build\n\n" >> $GITHUB_STEP_SUMMARY - echo "New version \`${EXT_RELEASE}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY + echo "New sanitized version \`${EXT_RELEASE_SANITIZED}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY if [[ "${artifacts_found}" == "true" ]]; then echo "All artifacts seem to be uploaded." >> $GITHUB_STEP_SUMMARY fi @@ -136,7 +139,7 @@ jobs: --data-urlencode "description=GHA external trigger https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" \ --data-urlencode "Submit=Submit" echo "**** Notifying Discord ****" - TRIGGER_REASON="A version change was detected for audacity tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE}" + TRIGGER_REASON="A version change was detected for audacity tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE_SANITIZED}" curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://cdn.discordapp.com/avatars/354986384542662657/df91181b3f1cf0ef1592fbe18e0962d7.png","embeds": [{"color": 9802903, "description": "**Build Triggered** \n**Reason:** '"${TRIGGER_REASON}"' \n**Build URL:** '"${buildurl}display/redirect"' \n"}], "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} diff --git a/.github/workflows/external_trigger_scheduler.yml b/.github/workflows/external_trigger_scheduler.yml index 6fb7a16..ed8ec95 100644 --- a/.github/workflows/external_trigger_scheduler.yml +++ b/.github/workflows/external_trigger_scheduler.yml @@ -5,6 +5,9 @@ on: - cron: '34 * * * *' workflow_dispatch: +permissions: + contents: read + jobs: external-trigger-scheduler: runs-on: ubuntu-latest diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml index 5d7ce49..753384d 100644 --- a/.github/workflows/greetings.yml +++ b/.github/workflows/greetings.yml @@ -2,8 +2,14 @@ name: Greetings on: [pull_request_target, issues] +permissions: + contents: read + jobs: greeting: + permissions: + issues: write + pull-requests: write runs-on: ubuntu-latest steps: - uses: actions/first-interaction@v1 diff --git a/.github/workflows/package_trigger_scheduler.yml b/.github/workflows/package_trigger_scheduler.yml index 071b97b..39609c6 100644 --- a/.github/workflows/package_trigger_scheduler.yml +++ b/.github/workflows/package_trigger_scheduler.yml @@ -5,6 +5,9 @@ on: - cron: '49 4 * * 2' workflow_dispatch: +permissions: + contents: read + jobs: package-trigger-scheduler: runs-on: ubuntu-latest diff --git a/Jenkinsfile b/Jenkinsfile index 218f6a0..ca88f4b 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -94,7 +94,11 @@ pipeline { env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DOCKERHUB_IMAGE + '/tags/' env.PULL_REQUEST = env.CHANGE_ID env.TEMPLATED_FILES = 'Jenkinsfile README.md LICENSE .editorconfig ./.github/CONTRIBUTING.md ./.github/FUNDING.yml ./.github/ISSUE_TEMPLATE/config.yml ./.github/ISSUE_TEMPLATE/issue.bug.yml ./.github/ISSUE_TEMPLATE/issue.feature.yml ./.github/PULL_REQUEST_TEMPLATE.md ./.github/workflows/external_trigger_scheduler.yml ./.github/workflows/greetings.yml ./.github/workflows/package_trigger_scheduler.yml ./.github/workflows/call_issue_pr_tracker.yml ./.github/workflows/call_issues_cron.yml ./.github/workflows/permissions.yml ./.github/workflows/external_trigger.yml' + if ( env.SYFT_IMAGE_TAG == null ) { + env.SYFT_IMAGE_TAG = 'latest' + } } + echo "Using syft image tag ${SYFT_IMAGE_TAG}" sh '''#! /bin/bash echo "The default github branch detected as ${GH_DEFAULT_BRANCH}" ''' script{ @@ -780,7 +784,7 @@ pipeline { docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock:ro \ -v ${TEMPDIR}:/tmp \ - ghcr.io/anchore/syft:v1.26.1 \ + ghcr.io/anchore/syft:${SYFT_IMAGE_TAG} \ ${LOCAL_CONTAINER} -o table=/tmp/package_versions.txt NEW_PACKAGE_TAG=$(md5sum ${TEMPDIR}/package_versions.txt | cut -c1-8 ) echo "Package tag sha from current packages in buit container is ${NEW_PACKAGE_TAG} comparing to old ${PACKAGE_TAG} from github" @@ -890,6 +894,7 @@ pipeline { -e WEB_AUTH=\"${CI_AUTH}\" \ -e WEB_PATH=\"${CI_WEBPATH}\" \ -e NODE_NAME=\"${NODE_NAME}\" \ + -e SYFT_IMAGE_TAG=\"${CI_SYFT_IMAGE_TAG:-${SYFT_IMAGE_TAG}}\" \ -t ghcr.io/linuxserver/ci:latest \ python3 test_build.py''' } diff --git a/README.md b/README.md index 3d36255..1c73ac0 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,6 @@ [![Blog](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Blog)](https://blog.linuxserver.io "all the things you can do with our containers including How-To guides, opinions and much more!") [![Discord](https://img.shields.io/discord/354974912613449730.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Discord&logo=discord)](https://linuxserver.io/discord "realtime support / chat with the community and the team.") [![Discourse](https://img.shields.io/discourse/https/discourse.linuxserver.io/topics.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&logo=discourse)](https://discourse.linuxserver.io "post on our community forum.") -[![Fleet](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Fleet)](https://fleet.linuxserver.io "an online web interface which displays all of our maintained images.") [![GitHub](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=GitHub&logo=github)](https://github.com/linuxserver "view the source for all of our repositories.") [![Open Collective](https://img.shields.io/opencollective/all/linuxserver.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Supporters&logo=open%20collective)](https://opencollective.com/linuxserver "please consider helping us by either donating or contributing to our budget") @@ -22,7 +21,6 @@ Find us at: * [Blog](https://blog.linuxserver.io) - all the things you can do with our containers including How-To guides, opinions and much more! * [Discord](https://linuxserver.io/discord) - realtime support / chat with the community and the team. * [Discourse](https://discourse.linuxserver.io) - post on our community forum. -* [Fleet](https://fleet.linuxserver.io) - an online web interface which displays all of our maintained images. * [GitHub](https://github.com/linuxserver) - view the source for all of our repositories. * [Open Collective](https://opencollective.com/linuxserver) - please consider helping us by either donating or contributing to our budget @@ -55,7 +53,6 @@ The architectures supported by this image are: | :----: | :----: | ---- | | x86-64 | ✅ | amd64-\ | | arm64 | ❌ | | -| armhf | ❌ | | ## Application Setup diff --git a/package_versions.txt b/package_versions.txt index 781705c..817194f 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -7,7 +7,7 @@ NAME VE @types/busboy 1.5.0 npm @types/cors 2.8.19 npm @types/node 18.18.14 npm -@types/node 24.0.3 npm +@types/node 24.0.13 npm accepts 1.3.8 npm acorn 8.8.1 npm acorn-bigint 1.0.0 npm @@ -45,8 +45,8 @@ blinker 1. body-parser 1.20.3 npm brace-expansion 1.1.12 npm brace-expansion 2.0.2 npm -bsdextrautils 2.39.3-9ubuntu6.2 deb -bsdutils 1:2.39.3-9ubuntu6.2 deb +bsdextrautils 2.39.3-9ubuntu6.3 deb +bsdutils 1:2.39.3-9ubuntu6.3 deb busboy 1.6.0 npm bytes 3.1.2 npm ca-certificates 20240203 deb @@ -55,9 +55,9 @@ call-bound 1. catatonit 0.1.7-1 deb chalk 4.1.2 npm cjs-module-lexer 1.2.3 npm -cloud.google.com/go/compute/metadata v0.5.2 go-module +cloud.google.com/go/compute/metadata v0.6.0 go-module cloud.google.com/go/logging v1.9.0 go-module -cloud.google.com/go/longrunning v0.5.4 go-module +cloud.google.com/go/longrunning v0.5.5 go-module code.cloudfoundry.org/clock v1.1.0 go-module color-convert 2.0.1 npm color-name 1.1.4 npm @@ -109,12 +109,12 @@ debug 4. depd 2.0.0 npm destroy 1.2.0 npm diffutils 1:3.10-1build1 deb -dirmngr 2.4.4-2ubuntu17.2 deb +dirmngr 2.4.4-2ubuntu17.3 deb distro 1.9.0 python distro-info-data 0.60ubuntu0.3 deb -docker-ce 5:28.2.2-1~ubuntu.24.04~noble deb -docker-ce-cli 5:28.2.2-1~ubuntu.24.04~noble deb -docker-compose-plugin 2.36.2-1~ubuntu.24.04~noble deb +docker-ce 5:28.3.2-1~ubuntu.24.04~noble deb +docker-ce-cli 5:28.3.2-1~ubuntu.24.04~noble deb +docker-compose-plugin 2.38.2-1~ubuntu.24.04~noble deb dpkg 1.22.6ubuntu6.1 deb dunder-proto 1.0.1 npm dunst 1.9.2-1build2 deb @@ -153,7 +153,7 @@ gcc-13-base 13 gcc-14-base 14.2.0-4ubuntu2~24.04 deb get-intrinsic 1.3.0 npm get-proto 1.0.1 npm -ghostscript 10.02.1~dfsg1-0ubuntu7.6 deb +ghostscript 10.02.1~dfsg1-0ubuntu7.7 deb gir1.2-atk-1.0 2.52.0-1build1 deb gir1.2-atspi-2.0 2.52.0-1build1 deb gir1.2-freedesktop 1.80.1-1 deb @@ -170,7 +170,7 @@ github.com/DefangLabs/secret-detector v0 github.com/Graylog2/go-gelf v0.0.0-20191017102106-1550ee647df0 go-module github.com/Masterminds/semver/v3 v3.2.1 go-module github.com/Microsoft/hcsshim v0.11.7 go-module (+1 duplicate) -github.com/Microsoft/hcsshim v0.12.9 go-module +github.com/Microsoft/hcsshim v0.13.0 go-module github.com/RackSec/srslog v0.0.0-20180709174129-a4725f04ec91 go-module github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d go-module github.com/agext/levenshtein v1.2.3 go-module @@ -206,7 +206,7 @@ github.com/cilium/ebpf v0 github.com/cilium/ebpf v0.17.3 go-module github.com/cilium/ebpf v0.9.1 go-module (+3 duplicates) github.com/cloudflare/cfssl v1.6.4 go-module -github.com/compose-spec/compose-go/v2 v2.6.4 go-module +github.com/compose-spec/compose-go/v2 v2.7.1 go-module github.com/container-storage-interface/spec v1.5.0 go-module github.com/containerd/accelerated-container-image v1.3.0 go-module github.com/containerd/aufs v1.0.0 go-module @@ -215,12 +215,12 @@ github.com/containerd/cgroups v1 github.com/containerd/cgroups/v3 v3.0.2 go-module (+3 duplicates) github.com/containerd/cgroups/v3 v3.0.5 go-module github.com/containerd/console v1.0.3 go-module (+4 duplicates) -github.com/containerd/console v1.0.4 go-module (+2 duplicates) +github.com/containerd/console v1.0.4 go-module +github.com/containerd/console v1.0.5 go-module (+1 duplicate) github.com/containerd/containerd v1.7.27 go-module (+4 duplicates) github.com/containerd/containerd/api v1.8.0 go-module (+4 duplicates) github.com/containerd/containerd/api v1.9.0 go-module (+1 duplicate) -github.com/containerd/containerd/v2 v2.0.5 go-module -github.com/containerd/containerd/v2 v2.1.1 go-module +github.com/containerd/containerd/v2 v2.1.3 go-module (+1 duplicate) github.com/containerd/continuity v0.4.4 go-module (+4 duplicates) github.com/containerd/continuity v0.4.5 go-module (+1 duplicate) github.com/containerd/errdefs v0.3.0 go-module (+4 duplicates) @@ -244,9 +244,9 @@ github.com/containerd/typeurl/v2 v2 github.com/containerd/typeurl/v2 v2.2.3 go-module (+1 duplicate) github.com/containerd/zfs v1.1.0 go-module github.com/containernetworking/cni v1.1.2 go-module (+1 duplicate) -github.com/containernetworking/cni v1.2.3 go-module +github.com/containernetworking/cni v1.3.0 go-module github.com/containernetworking/plugins v1.2.0 go-module -github.com/containernetworking/plugins v1.6.2 go-module +github.com/containernetworking/plugins v1.7.1 go-module github.com/containers/ocicrypt v1.1.10 go-module github.com/coreos/go-systemd/v22 v22.5.0 go-module (+5 duplicates) github.com/cyphar/filepath-securejoin v0.4.1 go-module (+1 duplicate) @@ -254,14 +254,14 @@ github.com/davecgh/go-spew v1 github.com/deckarep/golang-set/v2 v2.3.0 go-module github.com/dimchansky/utfbom v1.1.1 go-module github.com/distribution/reference v0.6.0 go-module (+3 duplicates) -github.com/docker/buildx v0.24.0 go-module -github.com/docker/cli v28.1.1+incompatible go-module -github.com/docker/cli-docs-tool v0.9.0 go-module +github.com/docker/buildx v0.25.0 go-module +github.com/docker/cli v28.3.1+incompatible go-module +github.com/docker/cli-docs-tool v0.10.0 go-module github.com/docker/cli/cmd/docker UNKNOWN go-module github.com/docker/compose/v2 UNKNOWN go-module github.com/docker/distribution v2.8.3+incompatible go-module (+1 duplicate) -github.com/docker/docker v28.1.1+incompatible go-module -github.com/docker/docker v28.2.2 go-module (+1 duplicate) +github.com/docker/docker v28.3.1+incompatible go-module +github.com/docker/docker v28.3.2 go-module (+1 duplicate) github.com/docker/docker-credential-helpers v0.9.3 go-module github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c go-module github.com/docker/go-connections v0.5.0 go-module (+1 duplicate) @@ -278,7 +278,7 @@ github.com/felixge/httpsnoop v1 github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee go-module github.com/fluent/fluent-logger-golang v1.9.0 go-module github.com/fsnotify/fsnotify v1.6.0 go-module -github.com/fsnotify/fsnotify v1.7.0 go-module +github.com/fsnotify/fsnotify v1.9.0 go-module github.com/fvbommel/sortorder v1.1.0 go-module github.com/fxamacker/cbor/v2 v2.7.0 go-module github.com/go-jose/go-jose/v3 v3.0.3 go-module @@ -287,7 +287,7 @@ github.com/go-logr/stdr v1 github.com/go-openapi/jsonpointer v0.21.0 go-module github.com/go-openapi/jsonreference v0.20.2 go-module github.com/go-openapi/swag v0.23.0 go-module -github.com/go-viper/mapstructure/v2 v2.0.0 go-module +github.com/go-viper/mapstructure/v2 v2.3.0 go-module github.com/godbus/dbus/v5 v5.1.0 go-module (+5 duplicates) github.com/gofrs/flock v0.12.1 go-module (+1 duplicate) github.com/gogo/protobuf v1.3.2 go-module (+6 duplicates) @@ -312,8 +312,7 @@ github.com/gorilla/websocket v1 github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 go-module github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 go-module (+1 duplicate) github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 go-module -github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 go-module -github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 go-module +github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 go-module (+1 duplicate) github.com/hashicorp/errwrap v1.1.0 go-module (+1 duplicate) github.com/hashicorp/go-cleanhttp v0.5.2 go-module github.com/hashicorp/go-immutable-radix v1.3.1 go-module @@ -327,7 +326,7 @@ github.com/hashicorp/golang-lru v0 github.com/hashicorp/golang-lru/v2 v2.0.7 go-module github.com/hashicorp/memberlist v0.4.0 go-module github.com/hashicorp/serf v0.8.5 go-module -github.com/in-toto/in-toto-golang v0.5.0 go-module (+1 duplicate) +github.com/in-toto/in-toto-golang v0.9.0 go-module (+1 duplicate) github.com/inhies/go-bytesize v0.0.0-20220417184213-4913239db9cf go-module github.com/intel/goresctrl v0.5.0 go-module (+1 duplicate) github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 go-module (+1 duplicate) @@ -346,7 +345,7 @@ github.com/mattn/go-runewidth v0 github.com/mattn/go-shellwords v1.0.12 go-module github.com/matttproud/golang_protobuf_extensions v1.0.4 go-module github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b go-module -github.com/miekg/dns v1.1.61 go-module +github.com/miekg/dns v1.1.66 go-module github.com/miekg/pkcs11 v1.1.1 go-module github.com/minio/sha256-simd v1.0.0 go-module (+1 duplicate) github.com/mistifyio/go-zfs/v3 v3.0.1 go-module (+1 duplicate) @@ -354,7 +353,7 @@ github.com/mitchellh/copystructure v1 github.com/mitchellh/hashstructure/v2 v2.0.2 go-module (+1 duplicate) github.com/mitchellh/mapstructure v1.5.0 go-module github.com/mitchellh/reflectwalk v1.0.2 go-module -github.com/moby/buildkit v0.22.0 go-module (+1 duplicate) +github.com/moby/buildkit v0.23.2 go-module (+1 duplicate) github.com/moby/docker-image-spec v1.3.1 go-module (+1 duplicate) github.com/moby/go-archive v0.1.0 go-module (+1 duplicate) github.com/moby/ipvs v1.1.0 go-module @@ -363,7 +362,7 @@ github.com/moby/patternmatcher v0 github.com/moby/pubsub v1.0.0 go-module github.com/moby/spdystream v0.2.0 go-module github.com/moby/spdystream v0.5.0 go-module -github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554 go-module +github.com/moby/swarmkit/v2 v2.0.0 go-module github.com/moby/sys/atomicwriter v0.1.0 go-module (+1 duplicate) github.com/moby/sys/capability v0.4.0 go-module github.com/moby/sys/mount v0.3.4 go-module @@ -386,7 +385,7 @@ github.com/morikuni/aec v1 github.com/mrunalp/fileutils v0.5.1 go-module github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go-module (+1 duplicate) github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f go-module -github.com/opencontainers/cgroups v0.0.2 go-module +github.com/opencontainers/cgroups v0.0.3 go-module github.com/opencontainers/go-digest v1.0.0 go-module (+6 duplicates) github.com/opencontainers/image-spec v1.1.0 go-module (+4 duplicates) github.com/opencontainers/image-spec v1.1.1 go-module (+1 duplicate) @@ -399,31 +398,30 @@ github.com/opencontainers/selinux v1 github.com/opencontainers/selinux v1.12.0 go-module github.com/package-url/packageurl-go v0.1.1 go-module github.com/pelletier/go-toml v1.9.5 go-module (+3 duplicates) -github.com/pelletier/go-toml/v2 v2.2.3 go-module +github.com/pelletier/go-toml/v2 v2.2.4 go-module github.com/philhofer/fwd v1.1.2 go-module github.com/pkg/errors v0.9.1 go-module (+6 duplicates) github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 go-module (+1 duplicate) github.com/pmezard/go-difflib v1.0.0 go-module (+1 duplicate) github.com/prometheus/client_golang v1.16.0 go-module -github.com/prometheus/client_golang v1.20.5 go-module -github.com/prometheus/client_golang v1.22.0 go-module +github.com/prometheus/client_golang v1.22.0 go-module (+1 duplicate) github.com/prometheus/client_model v0.3.0 go-module github.com/prometheus/client_model v0.6.1 go-module (+1 duplicate) github.com/prometheus/common v0.42.0 go-module -github.com/prometheus/common v0.55.0 go-module -github.com/prometheus/common v0.62.0 go-module +github.com/prometheus/common v0.62.0 go-module (+1 duplicate) github.com/prometheus/procfs v0.10.1 go-module github.com/prometheus/procfs v0.15.1 go-module (+1 duplicate) github.com/rivo/uniseg v0.2.0 go-module github.com/rootless-containers/rootlesskit/v2 v2.3.4 go-module +github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 go-module github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 go-module github.com/seccomp/libseccomp-golang v0.10.0 go-module -github.com/secure-systems-lab/go-securesystemslib v0.4.0 go-module (+1 duplicate) +github.com/secure-systems-lab/go-securesystemslib v0.6.0 go-module (+1 duplicate) github.com/serialx/hashring v0.0.0-20200727003509-22c0c7ab6b1b go-module github.com/shibumi/go-pathspec v1.3.0 go-module (+1 duplicate) github.com/sirupsen/logrus v1.9.3 go-module (+8 duplicates) github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 go-module -github.com/spdx/tools-golang v0.5.3 go-module +github.com/spdx/tools-golang v0.5.5 go-module github.com/spf13/cobra v1.9.1 go-module (+1 duplicate) github.com/spf13/pflag v1.0.5 go-module github.com/spf13/pflag v1.0.6 go-module (+1 duplicate) @@ -435,10 +433,10 @@ github.com/theupdateframework/notary v0 github.com/tilt-dev/fsnotify v1.4.8-0.20220602155310-fff9c274a375 go-module github.com/tinylib/msgp v1.1.8 go-module github.com/tonistiigi/dchapes-mode v0.0.0-20250318174251-73d941a28323 go-module (+1 duplicate) -github.com/tonistiigi/fsutil v0.0.0-20250417144416-3f76f8130144 go-module (+1 duplicate) -github.com/tonistiigi/go-actions-cache v0.0.0-20250228231703-3e9a6642607f go-module +github.com/tonistiigi/fsutil v0.0.0-20250605211040-586307ad452f go-module (+1 duplicate) +github.com/tonistiigi/go-actions-cache v0.0.0-20250626083717-378c5ed1ddd9 go-module github.com/tonistiigi/go-archvariant v1.0.0 go-module -github.com/tonistiigi/go-csvvalue v0.0.0-20240710180619-ddb21b71c0b4 go-module (+1 duplicate) +github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 go-module (+1 duplicate) github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea go-module (+1 duplicate) github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab go-module github.com/urfave/cli v1.22.12 go-module (+1 duplicate) @@ -462,54 +460,46 @@ github.com/zmap/zlint/v3 v3 glib-networking 2.80.0-1build1 deb glib-networking-common 2.80.0-1build1 deb glib-networking-services 2.80.0-1build1 deb -gnupg 2.4.4-2ubuntu17.2 deb -gnupg-l10n 2.4.4-2ubuntu17.2 deb -gnupg-utils 2.4.4-2ubuntu17.2 deb +gnupg 2.4.4-2ubuntu17.3 deb +gnupg-l10n 2.4.4-2ubuntu17.3 deb +gnupg-utils 2.4.4-2ubuntu17.3 deb go.etcd.io/bbolt v1.3.10 go-module -go.etcd.io/bbolt v1.3.11 go-module +go.etcd.io/bbolt v1.4.0 go-module go.etcd.io/etcd/client/pkg/v3 v3.5.16 go-module go.etcd.io/etcd/pkg/v3 v3.5.16 go-module go.etcd.io/etcd/raft/v3 v3.5.16 go-module go.etcd.io/etcd/server/v3 v3.5.16 go-module go.mozilla.org/pkcs7 v0.0.0-20200128120323-432b2356ecb1 go-module go.opencensus.io v0.24.0 go-module -go.opentelemetry.io/auto/sdk v1.1.0 go-module +go.opentelemetry.io/auto/sdk v1.1.0 go-module (+1 duplicate) go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 go-module -go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 go-module -go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 go-module -go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 go-module (+1 duplicate) +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 go-module (+1 duplicate) +go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 go-module +go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 go-module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 go-module (+1 duplicate) -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 go-module -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 go-module +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 go-module (+1 duplicate) go.opentelemetry.io/contrib/processors/baggagecopy v0.4.0 go-module go.opentelemetry.io/otel v1.21.0 go-module (+1 duplicate) -go.opentelemetry.io/otel v1.31.0 go-module -go.opentelemetry.io/otel v1.35.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 go-module (+1 duplicate) -go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 go-module (+1 duplicate) +go.opentelemetry.io/otel v1.35.0 go-module (+1 duplicate) +go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 go-module go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 go-module -go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 go-module +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/metric v1.21.0 go-module (+1 duplicate) -go.opentelemetry.io/otel/metric v1.31.0 go-module -go.opentelemetry.io/otel/metric v1.35.0 go-module +go.opentelemetry.io/otel/metric v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/sdk v1.21.0 go-module -go.opentelemetry.io/otel/sdk v1.31.0 go-module -go.opentelemetry.io/otel/sdk v1.35.0 go-module -go.opentelemetry.io/otel/sdk/metric v1.31.0 go-module -go.opentelemetry.io/otel/sdk/metric v1.35.0 go-module +go.opentelemetry.io/otel/sdk v1.35.0 go-module (+1 duplicate) +go.opentelemetry.io/otel/sdk/metric v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/otel/trace v1.21.0 go-module (+1 duplicate) -go.opentelemetry.io/otel/trace v1.31.0 go-module -go.opentelemetry.io/otel/trace v1.35.0 go-module +go.opentelemetry.io/otel/trace v1.35.0 go-module (+1 duplicate) go.opentelemetry.io/proto/otlp v1.0.0 go-module -go.opentelemetry.io/proto/otlp v1.3.1 go-module -go.opentelemetry.io/proto/otlp v1.5.0 go-module +go.opentelemetry.io/proto/otlp v1.5.0 go-module (+1 duplicate) go.uber.org/atomic v1.9.0 go-module go.uber.org/mock v0.5.2 go-module go.uber.org/multierr v1.8.0 go-module @@ -517,7 +507,6 @@ go.uber.org/zap v1 golang.org/x/crypto v0.31.0 go-module golang.org/x/crypto v0.37.0 go-module (+1 duplicate) golang.org/x/exp v0.0.0-20230224173230-c95f2b4c22f2 go-module -golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0 go-module golang.org/x/mod v0.17.0 go-module golang.org/x/mod v0.24.0 go-module golang.org/x/net v0.33.0 go-module (+3 duplicates) @@ -525,48 +514,47 @@ golang.org/x/net v0 golang.org/x/oauth2 v0.11.0 go-module golang.org/x/oauth2 v0.29.0 go-module (+1 duplicate) golang.org/x/sync v0.10.0 go-module (+4 duplicates) -golang.org/x/sync v0.13.0 go-module golang.org/x/sync v0.14.0 go-module +golang.org/x/sync v0.15.0 go-module golang.org/x/sys v0.28.0 go-module (+5 duplicates) -golang.org/x/sys v0.32.0 go-module (+1 duplicate) -golang.org/x/sys v0.33.0 go-module +golang.org/x/sys v0.33.0 go-module (+2 duplicates) golang.org/x/term v0.27.0 go-module golang.org/x/term v0.31.0 go-module golang.org/x/text v0.21.0 go-module (+2 duplicates) golang.org/x/text v0.24.0 go-module (+1 duplicate) golang.org/x/time v0.0.0-20220210224613-90d013bbcef8 go-module golang.org/x/time v0.11.0 go-module (+1 duplicate) -google.golang.org/api v0.155.0 go-module +google.golang.org/api v0.160.0 go-module google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 go-module (+4 duplicates) -google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 go-module +google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de go-module google.golang.org/genproto/googleapis/api v0.0.0-20231120223509-83a465c0220f go-module -google.golang.org/genproto/googleapis/api v0.0.0-20241021214115-324edc3d5d38 go-module google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a go-module +google.golang.org/genproto/googleapis/api v0.0.0-20250324211829-b45e905df463 go-module google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda go-module (+4 duplicates) -google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38 go-module google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a go-module +google.golang.org/genproto/googleapis/rpc v0.0.0-20250324211829-b45e905df463 go-module google.golang.org/grpc v1.59.0 go-module (+4 duplicates) -google.golang.org/grpc v1.69.4 go-module -google.golang.org/grpc v1.72.1 go-module +google.golang.org/grpc v1.72.2 go-module +google.golang.org/grpc v1.73.0 go-module google.golang.org/protobuf v1.33.0 go-module -google.golang.org/protobuf v1.35.2 go-module (+5 duplicates) -google.golang.org/protobuf v1.36.6 go-module +google.golang.org/protobuf v1.35.2 go-module (+4 duplicates) +google.golang.org/protobuf v1.36.6 go-module (+1 duplicate) gopd 1.2.0 npm gopkg.in/evanphx/json-patch.v4 v4.12.0 go-module gopkg.in/inf.v0 v0.9.1 go-module (+2 duplicates) gopkg.in/ini.v1 v1.67.0 go-module gopkg.in/yaml.v2 v2.4.0 go-module (+1 duplicate) gopkg.in/yaml.v3 v3.0.1 go-module (+2 duplicates) -gpg 2.4.4-2ubuntu17.2 deb -gpg-agent 2.4.4-2ubuntu17.2 deb -gpg-wks-client 2.4.4-2ubuntu17.2 deb -gpgconf 2.4.4-2ubuntu17.2 deb -gpgsm 2.4.4-2ubuntu17.2 deb -gpgv 2.4.4-2ubuntu17.2 deb +gpg 2.4.4-2ubuntu17.3 deb +gpg-agent 2.4.4-2ubuntu17.3 deb +gpg-wks-client 2.4.4-2ubuntu17.3 deb +gpgconf 2.4.4-2ubuntu17.3 deb +gpgsm 2.4.4-2ubuntu17.3 deb +gpgv 2.4.4-2ubuntu17.3 deb grep 3.11-4build1 deb groff-base 1.23.0-3build2 deb gsettings-desktop-schemas 46.1-0ubuntu1 deb -gzip 1.12-1ubuntu3 deb +gzip 1.12-1ubuntu3.1 deb has-flag 4.0.0 npm has-symbols 1.1.0 npm hasown 2.0.2 npm @@ -601,7 +589,7 @@ k8s.io/utils v0 kbd 2.6.4-2ubuntu2 deb kclient 0.4.1 npm keyboard-configuration 1.226ubuntu1 deb -keyboxd 2.4.4-2ubuntu17.2 deb +keyboxd 2.4.4-2ubuntu17.3 deb krb5-locales 1.20.1-6ubuntu2.6 deb launchpadlib 1.11.0 python lazr-restfulclient 0.14.6 python @@ -613,9 +601,9 @@ libapparmor1 4. libappstream5 1.0.2-1build6 deb libapt-pkg6.0t64 2.8.3 deb libargon2-1 0~20190702+dfsg-4build1 deb -libasound2-data 1.2.11-1build2 deb +libasound2-data 1.2.11-1ubuntu0.1 deb libasound2-plugins 1.2.7.1-1ubuntu5 deb -libasound2t64 1.2.11-1build2 deb +libasound2t64 1.2.11-1ubuntu0.1 deb libass9 1:0.17.1-2build1 deb libassuan0 2.5.6-1build1 deb libasyncns0 0.8-6build4 deb @@ -641,19 +629,19 @@ libavutil58 7: libb-hooks-endofscope-perl 0.28-1 deb libb-hooks-op-check-perl 0.22-3build1 deb libblas3 3.12.0-3build1.1 deb -libblkid-dev 2.39.3-9ubuntu6.2 deb -libblkid1 2.39.3-9ubuntu6.2 deb +libblkid-dev 2.39.3-9ubuntu6.3 deb +libblkid1 2.39.3-9ubuntu6.3 deb libbluray2 1:1.3.4-1build1 deb libbpf1 1:1.3.0-2build2 deb libbrotli1 1.1.0-2build2 deb libbs2b0 3.1.0+dfsg-7build1 deb libbsd0 0.12.1-1build1.1 deb libbz2-1.0 1.0.8-5.1build0.1 deb -libc-bin 2.39-0ubuntu8.4 deb -libc-dev-bin 2.39-0ubuntu8.4 deb -libc-devtools 2.39-0ubuntu8.4 deb -libc6 2.39-0ubuntu8.4 deb -libc6-dev 2.39-0ubuntu8.4 deb +libc-bin 2.39-0ubuntu8.5 deb +libc-dev-bin 2.39-0ubuntu8.5 deb +libc-devtools 2.39-0ubuntu8.5 deb +libc6 2.39-0ubuntu8.5 deb +libc6-dev 2.39-0ubuntu8.5 deb libcaca0 0.99.beta20-4build2 deb libcairo-gobject2 1.18.0-3build1 deb libcairo2 1.18.0-3build1 deb @@ -720,7 +708,7 @@ libexif12 0. libexpat1 2.6.1-2ubuntu0.3 deb libexporter-tiny-perl 1.006002-1 deb libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 deb -libfdisk1 2.39.3-9ubuntu6.2 deb +libfdisk1 2.39.3-9ubuntu6.3 deb libffi-dev 3.4.6-1build1 deb libffi8 3.4.6-1build1 deb libfftw3-double3 3.3.10-1ubuntu3 deb @@ -764,9 +752,9 @@ libgnutls30t64 3. libgomp1 14.2.0-4ubuntu2~24.04 deb libgpg-error0 1.47-3build2.1 deb libgraphite2-3 1.3.14-2build1 deb -libgs-common 10.02.1~dfsg1-0ubuntu7.6 deb -libgs10 10.02.1~dfsg1-0ubuntu7.6 deb -libgs10-common 10.02.1~dfsg1-0ubuntu7.6 deb +libgs-common 10.02.1~dfsg1-0ubuntu7.7 deb +libgs10 10.02.1~dfsg1-0ubuntu7.7 deb +libgs10-common 10.02.1~dfsg1-0ubuntu7.7 deb libgsm1 1.0.22-1build1 deb libgssapi-krb5-2 1.20.1-6ubuntu2.6 deb libgstreamer-plugins-base1.0-0 1.24.2-1ubuntu0.2 deb @@ -826,8 +814,8 @@ libmd0 1. libmnl0 1.0.5-2build1 deb libmodule-implementation-perl 0.09-2 deb libmodule-runtime-perl 0.016-2 deb -libmount-dev 2.39.3-9ubuntu6.2 deb -libmount1 2.39.3-9ubuntu6.2 deb +libmount-dev 2.39.3-9ubuntu6.3 deb +libmount1 2.39.3-9ubuntu6.3 deb libmp3lame0 3.100-6build1 deb libmpc3 1.3.1-1build1.1 deb libmpfr6 4.2.1-1build1.1 deb @@ -879,7 +867,7 @@ libparams-classify-perl 0. libparams-util-perl 1.102-2build3 deb libparams-validationcompiler-perl 0.31-1 deb libpci3 1:3.10.0-2build1 deb -libpciaccess0 0.17-3build1 deb +libpciaccess0 0.17-3ubuntu0.24.04.2 deb libpcre2-16-0 10.42-4ubuntu2.1 deb libpcre2-32-0 10.42-4ubuntu2.1 deb libpcre2-8-0 10.42-4ubuntu2.1 deb @@ -939,7 +927,7 @@ libsharpyuv0 1. libshine3 3.1.1-2build1 deb libslang2 2.3.3-3build2 deb libsm6 2:1.2.3-1build3 deb -libsmartcols1 2.39.3-9ubuntu6.2 deb +libsmartcols1 2.39.3-9ubuntu6.3 deb libsnapd-glib-2-1 1.64-0ubuntu5 deb libsnappy1v5 1.1.10-1build1 deb libsndfile1 1.2.2-1ubuntu5.24.04.1 deb @@ -958,8 +946,8 @@ libsqlite3-0 3. libsratom-0-0 0.6.16-1build1 deb libsrt1.5-gnutls 1.5.3-1build2 deb libss2 1.47.0-2.4~exp1ubuntu4.1 deb -libssh-4 0.10.6-2build2 deb -libssh-gcrypt-4 0.10.6-2build2 deb +libssh-4 0.10.6-2ubuntu0.1 deb +libssh-gcrypt-4 0.10.6-2ubuntu0.1 deb libssl3t64 3.0.13-0ubuntu3.5 deb libstartup-notification0 0.12-6build3 deb libstdc++6 14.2.0-4ubuntu2~24.04 deb @@ -995,7 +983,7 @@ libunistring5 1. libunwind8 1.6.2-3build1.1 deb libusb-1.0-0 2:1.0.27-1 deb libutempter0 1.2.1-3build1 deb -libuuid1 2.39.3-9ubuntu6.2 deb +libuuid1 2.39.3-9ubuntu6.3 deb libuv1t64 1.48.0-1.1build1 deb libva-drm2 2.20.0-2build1 deb libva-x11-2 2.20.0-2build1 deb @@ -1086,9 +1074,9 @@ libzmq5 4. libzstd1 1.5.5+dfsg2-2build1.1 deb libzvbi-common 0.2.42-2 deb libzvbi0t64 0.2.42-2 deb -linux-libc-dev 6.8.0-62.65 deb -locales 2.39-0ubuntu8.4 deb -locales-all 2.39-0ubuntu8.4 deb +linux-libc-dev 6.8.0-64.67 deb +locales 2.39-0ubuntu8.5 deb +locales-all 2.39-0ubuntu8.5 deb login 1:4.13+dfsg1-4ubuntu3.2 deb logsave 1.47.0-2.4~exp1ubuntu4.1 deb lsb-release 12.0-2 deb @@ -1109,17 +1097,17 @@ mime-db 1. mime-types 2.1.35 npm minimatch 3.1.2 npm minimatch 5.1.6 npm -mount 2.39.3-9ubuntu6.2 deb +mount 2.39.3-9ubuntu6.3 deb ms 2.0.0 npm ms 2.1.3 npm (+4 duplicates) -nan 2.22.2 npm +nan 2.23.0 npm ncurses-base 6.4+20240113-1ubuntu2 deb ncurses-bin 6.4+20240113-1ubuntu2 deb negotiator 0.6.3 npm netbase 6.4 deb netcat-openbsd 1.226-1ubuntu2 deb -nginx 1.24.0-2ubuntu7.3 deb -nginx-common 1.24.0-2ubuntu7.3 deb +nginx 1.24.0-2ubuntu7.4 deb +nginx-common 1.24.0-2ubuntu7.4 deb node-acorn 8.8.1+ds+~cs25.17.7-2 deb node-busboy 1.6.0+~cs2.6.0-2 deb node-cjs-module-lexer 1.2.3+dfsg-1 deb @@ -1221,9 +1209,9 @@ software-properties-common 0. ssl-cert 1.1.2ubuntu1 deb statuses 2.0.1 npm stdlib go1.23.7 go-module (+5 duplicates) -stdlib go1.24.3 go-module (+3 duplicates) +stdlib go1.24.5 go-module (+3 duplicates) streamsearch 1.1.0 npm -sudo 1.9.15p5-3ubuntu5 deb +sudo 1.9.15p5-3ubuntu5.24.04.1 deb supports-color 7.2.0 npm systemd 255.4-1ubuntu8.8 deb systemd-dev 255.4-1ubuntu8.8 deb @@ -1244,9 +1232,9 @@ undici 5. undici-types 7.8.0 npm unminimize 0.2.1 deb unpipe 1.0.0 npm -util-linux 2.39.3-9ubuntu6.2 deb +util-linux 2.39.3-9ubuntu6.3 deb utils-merge 1.0.1 npm -uuid-dev 2.39.3-9ubuntu6.2 deb +uuid-dev 2.39.3-9ubuntu6.3 deb vary 1.1.2 npm vulkan-tools 1.3.275.0+dfsg1-1 deb wadllib 1.3.6 python