From 586a8aa9fabebc361a58f6c1be0b60ebdb353503 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Nov 2026 19:15:02 +0000 Subject: [PATCH] Bump the gomod group across 1 directory with 2 updates Bumps the gomod group with 2 updates in the / directory: [cel.dev/cel-go](https://github.com/cel-expr/cel-go) and [github.com/policylabs/signer](https://github.com/policylabs/signer). Updates `cel.dev/cel-go` from 0.33.1 to 0.33.2 - [Release notes](https://github.com/cel-expr/cel-go/releases) - [Commits](https://github.com/cel-expr/cel-go/compare/v0.33.1...v0.33.2) Updates `github.com/policylabs/signer` from 0.6.5 to 0.6.6 - [Release notes](https://github.com/policylabs/signer/releases) - [Commits](https://github.com/policylabs/signer/compare/v0.6.5...v0.6.6) --- updated-dependencies: - dependency-name: cel.dev/cel-go dependency-version: 0.33.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/policylabs/signer dependency-version: 0.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] --- go.mod | 6 +++--- go.sum | 12 ++++++------ 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/go.mod b/go.mod index a446bba..b23bf86 100644 --- a/go.mod +++ b/go.mod @@ -3,14 +3,14 @@ module github.com/slsa-framework/verifier go 1.26.0 require ( - cel.dev/cel-go v0.33.1 + cel.dev/cel-go v0.33.2 github.com/carabiner-dev/command v0.3.4 github.com/carabiner-dev/hasher v0.2.4 github.com/fatih/color v1.19.0 github.com/in-toto/attestation v1.2.0 github.com/policylabs/attestation v0.3.0 github.com/policylabs/collector v0.4.0 - github.com/policylabs/signer v0.6.5 + github.com/policylabs/signer v0.6.6 github.com/slsa-framework/protos v0.0.0-20260928155916-9fa868b2a756 github.com/slsa-framework/source-tool v0.7.1 github.com/spf13/cobra v1.10.2 @@ -150,7 +150,7 @@ require ( golang.org/x/tools v0.51.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 // indirect - google.golang.org/grpc v1.84.0 // indirect + google.golang.org/grpc v1.85.0 // indirect gopkg.in/warnings.v0 v0.1.2 // indirect k8s.io/klog/v2 v2.140.0 // indirect sigs.k8s.io/release-utils v0.12.5 // indirect diff --git a/go.sum b/go.sum index 0b50cb0..5574fee 100644 --- a/go.sum +++ b/go.sum @@ -2,8 +2,8 @@ buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.12-202608252041 buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.12-20260825204119-511051f7f437.2/go.mod h1:TCt1lluMFnctISJXvkIQ4x3ABrPuUKCWKyjKdkJNBpw= buf.build/go/protovalidate v1.4.0 h1:UjLrYbt5VX7+TMOs2+pG5FhZhIG1mSfK4EIopbb4LcM= buf.build/go/protovalidate v1.4.0/go.mod h1:8vJfzNT6NIG2qm3uFsJDXMlRmG+bQJzbcIn1Aa0vPGs= -cel.dev/cel-go v0.33.1 h1:xRL3XUfZ3DXxWFLUsM2uavmtRBwrhlBBc+GEL1b9CIQ= -cel.dev/cel-go v0.33.1/go.mod h1:DnVip7tpJSsgZymwfT+m1tnEVy3ivAjSMXPx12YrMkU= +cel.dev/cel-go v0.33.2 h1:eAcEdBguc6AFrGbPOyE0g168Uey4kKFW9J6qsBLSeMU= +cel.dev/cel-go v0.33.2/go.mod h1:DnVip7tpJSsgZymwfT+m1tnEVy3ivAjSMXPx12YrMkU= cel.dev/expr v0.25.3 h1:A2jO8jwOugrrovveCWfj0KEZOfqiLgAcwjpHPhzIGw0= cel.dev/expr v0.25.3/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4= cloud.google.com/go v0.123.0 h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE= @@ -355,8 +355,8 @@ github.com/policylabs/policy v0.5.7-0.20261004134513-55e5473eef09 h1:xfDq4vrXBDv github.com/policylabs/policy v0.5.7-0.20261004134513-55e5473eef09/go.mod h1:NArOX4b9LMPoc/aa8WPuZkEknGavT3IoYiyJ1rHxUBE= github.com/policylabs/predicates v0.6.0 h1:PgM9/8X8p/i4+Mr+VkijTb2ukeykrHmmjBnk1GuSq+M= github.com/policylabs/predicates v0.6.0/go.mod h1:g3sbkSBMWlEK8CPVFiUzSOfUoHWKLFYHr7xugF77Z60= -github.com/policylabs/signer v0.6.5 h1:uihfCVmqFeVt2bXn8ooh/gGBUuP6Ry9XaXJgCAXB/+w= -github.com/policylabs/signer v0.6.5/go.mod h1:gM+NG4ltKM7LOBuAcQU18B3Y/vG1ECjP47XuUmzA0U0= +github.com/policylabs/signer v0.6.6 h1:NQVrwhSi+Fae5XVVQN9rQ94Z1vu6IiHWac9SK/NjLmo= +github.com/policylabs/signer v0.6.6/go.mod h1:ptQxLBBTfVnxQrRXxYlMFORieLuFjLcTmqSTQqtUrYg= github.com/protobom/protobom v0.6.2 h1:HJTEEnYyU1m3VWoVj0TkDqArWC3Q2CvSFXHUpCkRkoI= github.com/protobom/protobom v0.6.2/go.mod h1:WtLWrIyJthYwjbNqn4uMWzculpjNrmVYY78FgCRXe7w= github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ= @@ -530,8 +530,8 @@ google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 h1: google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688/go.mod h1:1RJ9BQGyNdZwkGc1eTqkErfRZ6RJyYPHZo73BZ1vQqI= google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 h1:cYNAzI2sUwhmCcoj9TxvihSrqsxt6uIkj3rDRhSDmW4= google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688/go.mod h1:DjtHYE8FKJLivXcBEjGwndXfIC23G0VpXiXKqG179uA= -google.golang.org/grpc v1.84.0 h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0= -google.golang.org/grpc v1.84.0/go.mod h1:ljCht0DrxQrXBDRTZp52Qxh3Ffk8CdYm2sj4O2QN2C0= +google.golang.org/grpc v1.85.0 h1:BPBCfuVRQ1qvBhKDOq9uvQllMvO59rKsYhXpp7Dd8vw= +google.golang.org/grpc v1.85.0/go.mod h1:0rQrOD58yjal/0EaVbGBANindixsCZNQPDV3VKtaKuQ= google.golang.org/protobuf v1.36.12 h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc= google.golang.org/protobuf v1.36.12/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=