root
/
buildah
mirror of https://github.com/containers/buildah.git
1
0
Fork 0
Code Issues Actions 2 Packages Projects Releases Wiki Activity
buildah/go.mod

43 lines
1.6 KiB
Modula-2
Raw Normal View History

migrate to go modules Signed-off-by: Valentin Rothberg <rothberg@redhat.com> Closes: #1621 Approved by: rhatdan
2019-06-21 23:23:28 +08:00
module github.com/containers/buildah
go 1.12
require (
bump containernetworking/cni to v0.8.1 - fix for CVE-2021-20206 Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2021-02-06 03:38:25 +08:00
github.com/containernetworking/cni v0.8.1
build(deps): bump github.com/containers/common from 0.35.3 to 0.35.4 Bumps [github.com/containers/common](https://github.com/containers/common) from 0.35.3 to 0.35.4. - [Release notes](https://github.com/containers/common/releases) - [Commits](https://github.com/containers/common/compare/v0.35.3...v0.35.4) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-03-29 18:24:34 +08:00
github.com/containers/common v0.35.4
Shrink the vendoring size of pkc/cli This PR removes the pkg/auth which brings in docker/docker since it really is not needed, and was only there to help users discover the settings of where the authfile was, when the environment variables were set. Would almost never be of any value. Move imagebuildah.BuildOptions to define.BuildOptions Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-03-02 02:07:58 +08:00
github.com/containers/image/v5 v5.10.5
build(deps): bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 Bumps [github.com/containers/ocicrypt](https://github.com/containers/ocicrypt) from 1.0.3 to 1.1.0. - [Release notes](https://github.com/containers/ocicrypt/releases) - [Commits](https://github.com/containers/ocicrypt/compare/v1.0.3...v1.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-02-01 18:37:37 +08:00
github.com/containers/ocicrypt v1.1.0
Bump containers/storage vendor to v1.29.0 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-04-12 21:18:50 +08:00
github.com/containers/storage v1.29.0
Bump github.com/fsouza/go-dockerclient from 1.3.0 to 1.4.4 Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient) from 1.3.0 to 1.4.4. - [Release notes](https://github.com/fsouza/go-dockerclient/releases) - [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.3.0...v1.4.4) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Valentin Rothberg <rothberg@redhat.com> Closes: #1884 Approved by: rhatdan
2019-09-30 20:42:10 +08:00
github.com/docker/distribution v2.7.1+incompatible
vendor github.com/containers/storage@v1.12.15 * make local-cross more reliable for CI * Fix cross-compilation * zstd: use github.com/klauspost/compress directly * Add support for installing man pages * Remove merged directory when it is unmounted * Switch to golangci-lint * Update generated files * Keep track of the UIDs and GIDs used in applied layers * Add cirrus vendor check * Switch to go modules * Use same variable name on both commands * cirrus: ubuntu: try removing cryptsetup-initramfs * Move lockfiles to their own package * getLockfile(): use the absolute path * lockfile: don't bother releasing a lock when closing a file * locking: take read locks on read-only stores * locking test updates Signed-off-by: Valentin Rothberg <rothberg@redhat.com> Closes: #1739 Approved by: TomSweeneyRedHat
2019-07-23 23:58:15 +08:00
github.com/docker/go-units v0.4.0
Update docker/libnetwork to get rid of outdated sctp package Signed-off-by: Sascha Grunert <sgrunert@suse.com> Closes: #1690 Approved by: rhatdan
2019-06-25 22:26:41 +08:00
github.com/docker/libnetwork v0.8.0-dev.2.0.20190625141545-5a177b73e316
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.1 to 1.7.2 Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient) from 1.7.1 to 1.7.2. - [Release notes](https://github.com/fsouza/go-dockerclient/releases) - [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go) - [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.1...v1.7.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-03-08 18:03:39 +08:00
github.com/fsouza/go-dockerclient v1.7.2
migrate to go modules Signed-off-by: Valentin Rothberg <rothberg@redhat.com> Closes: #1621 Approved by: rhatdan
2019-06-21 23:23:28 +08:00
github.com/ghodss/yaml v1.0.0
build(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1 Bumps [github.com/hashicorp/go-multierror](https://github.com/hashicorp/go-multierror) from 1.1.0 to 1.1.1. - [Release notes](https://github.com/hashicorp/go-multierror/releases) - [Commits](https://github.com/hashicorp/go-multierror/compare/v1.1.0...v1.1.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-03-15 18:25:09 +08:00
github.com/hashicorp/go-multierror v1.1.1
Update to containers/common v0.4.1 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-21 06:15:30 +08:00
github.com/ishidawataru/sctp v0.0.0-20191218070446-00ab2ac2db07 // indirect
build(deps): bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11 Bumps [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) from 1.0.10 to 1.0.11. - [Release notes](https://github.com/mattn/go-shellwords/releases) - [Commits](https://github.com/mattn/go-shellwords/compare/v1.0.10...v1.0.11) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-18 18:22:34 +08:00
github.com/mattn/go-shellwords v1.0.11
build(deps): bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1 Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.16.0 to 1.16.1. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v1.16.0...v1.16.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-04-12 17:55:51 +08:00
github.com/onsi/ginkgo v1.16.1
build(deps): bump github.com/onsi/gomega from 1.10.5 to 1.11.0 Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.10.5 to 1.11.0. - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.10.5...v1.11.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-03-08 18:04:06 +08:00
github.com/onsi/gomega v1.11.0
Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0 Bumps [github.com/opencontainers/go-digest](https://github.com/opencontainers/go-digest) from 1.0.0-rc1 to 1.0.0. - [Release notes](https://github.com/opencontainers/go-digest/releases) - [Commits](https://github.com/opencontainers/go-digest/compare/v1.0.0-rc1...v1.0.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-18 18:10:19 +08:00
github.com/opencontainers/go-digest v1.0.0
Update c/image to v4.0.1 This requires updating all import paths throughout. Signed-off-by: Miloslav Trmač <mitr@redhat.com> Closes: #1891 Approved by: vrothberg
2019-10-02 04:03:57 +08:00
github.com/opencontainers/image-spec v1.0.2-0.20190823105129-775207bd45b6
build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2 Bumps [github.com/containers/common](https://github.com/containers/common) from 0.33.1 to 0.34.2. - [Release notes](https://github.com/containers/common/releases) - [Commits](https://github.com/containers/common/compare/v0.33.1...v0.34.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-02-09 07:06:30 +08:00
github.com/opencontainers/runc v1.0.0-rc93
github.com/opencontainers/runtime-spec v1.0.3-0.20200929063507-e6143ca7d51d
bump github.com/opencontainers/runtime-tools to v0.9.0 Update runtime-tools to v0.9.0. This requires a newer version of runtime-spec, so pull one in, too. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com> Closes: #1720 Approved by: vrothberg
2019-07-16 22:23:18 +08:00
github.com/opencontainers/runtime-tools v0.9.0
build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1 Bumps [github.com/containers/common](https://github.com/containers/common) from 0.31.0 to 0.31.1. - [Release notes](https://github.com/containers/common/releases) - [Commits](https://github.com/containers/common/compare/v0.31.0...v0.31.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-21 17:58:46 +08:00
github.com/opencontainers/selinux v1.8.0
bump github.com/openshift/imagebuilder from 1.1.8 to 1.2.0 Signed-off-by: Jakub Guzik <jakubmguzik@gmail.com>
2021-02-24 15:39:17 +08:00
github.com/openshift/imagebuilder v1.2.0
Bump c/storage to v1.15.7 As the title says, bumping to c/storage v1.15.7 to get overlayv2 fix. Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com> Closes: #2094 Approved by: rhatdan
2020-01-19 00:41:36 +08:00
github.com/pkg/errors v0.9.1
Switch to containers/common for seccomp seccomp/containers-golang is deprecated and we should switch to containers/common/pkg/seccomp instead. Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-08-28 17:38:44 +08:00
github.com/seccomp/libseccomp-golang v0.9.2-0.20200616122406-847368b35ebf
build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.8.0 to 1.8.1. - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](https://github.com/sirupsen/logrus/compare/v1.8.0...v1.8.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-03-15 18:24:24 +08:00
github.com/sirupsen/logrus v1.8.1
build(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3 Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-02-15 17:32:17 +08:00
github.com/spf13/cobra v1.1.3
Bump github.com/spf13/pflag from 1.0.3 to 1.0.5 Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag) from 1.0.3 to 1.0.5. - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](https://github.com/spf13/pflag/compare/v1.0.3...v1.0.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Valentin Rothberg <rothberg@redhat.com> Closes: #1878 Approved by: rhatdan
2019-09-30 20:39:04 +08:00
github.com/spf13/pflag v1.0.5
build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0 Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-18 18:22:50 +08:00
github.com/stretchr/testify v1.7.0
build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2 Bumps [github.com/containers/common](https://github.com/containers/common) from 0.33.1 to 0.34.2. - [Release notes](https://github.com/containers/common/releases) - [Commits](https://github.com/containers/common/compare/v0.33.1...v0.34.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-02-09 07:06:30 +08:00
github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635
Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5 Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) from 1.3.4 to 1.3.5. - [Release notes](https://github.com/etcd-io/bbolt/releases) - [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.4...v1.3.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-06-22 18:44:23 +08:00
go.etcd.io/bbolt v1.3.5
Bump golang.org/x/crypto to the latest Bump golang.org/x/crypto to the latest version to combat a low risk CVE-2020-29652. Will need to be cherry picked into v1.19 too before vendorded into Podman. Details: https://bugzilla.redhat.com/show_bug.cgi?id=1910447 Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2021-01-27 08:53:51 +08:00
golang.org/x/crypto v0.0.0-20201221181555-eec23a3978ad
build(deps): bump github.com/containers/common from 0.35.2 to 0.35.3 Bumps [github.com/containers/common](https://github.com/containers/common) from 0.35.2 to 0.35.3. - [Release notes](https://github.com/containers/common/releases) - [Commits](https://github.com/containers/common/compare/v0.35.2...v0.35.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-03-24 17:41:26 +08:00
golang.org/x/sync v0.0.0-20201207232520-09787c993a3a
Bump containers/storage vendor to v1.29.0 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-04-12 21:18:50 +08:00
golang.org/x/sys v0.0.0-20210324051608-47abb6519492
Rework conformance testing Move the conformance tests from ginkgo to using the default testing package and github.com/stretchr/testify/require, preserving the existing tests and adding more. Add conformance tests to our Cirrus configuration, currently marked as an allowed failure. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2020-06-19 06:03:43 +08:00
k8s.io/klog v1.0.0 // indirect
migrate to go modules Signed-off-by: Valentin Rothberg <rothberg@redhat.com> Closes: #1621 Approved by: rhatdan
2019-06-21 23:23:28 +08:00
)
Downgrade siruspen/logrus from 1.4.2 The upgrade of logrus forces to update the dependency in go module consumers as well. The new locking in logrus 1.5.0 introduces regressions in conjunction to deadlocks when using custom hooks, which is the case in CRI-O for example. Having it point to v1.5.0 here is forcing cri-o to upgrade it as well when we update c/buildah to v1.14.6. Let's downgrade logrus till sirupsen/logrus#1122 is fixed. Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
2020-04-06 21:57:52 +08:00
replace github.com/sirupsen/logrus => github.com/sirupsen/logrus v1.4.2