Commit graph

397 commits

Author SHA1 Message Date
cli automation
f8de714c65 Bump Go to 1.24.6 2025-08-07 03:32:50 +00:00
dependabot[bot]
9eea10a114
chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v1.0.0...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-15 14:20:07 +00:00
dependabot[bot]
f7576f02a5
chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/crypto/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-11 14:21:23 +00:00
dependabot[bot]
a21d32fe16 chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.32.0 to 0.33.0.
- [Commits](https://github.com/golang/term/compare/v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-11 11:18:48 +02:00
dependabot[bot]
b133506f84
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0
Bumps [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) from 0.4.3 to 0.5.0.
- [Release notes](https://github.com/sigstore/protobuf-specs/releases)
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/protobuf-specs/compare/v0.4.3...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-10 15:15:16 +00:00
cli automation
228fbe31dc Bump Go to 1.24.5 2025-07-09 17:58:34 +02:00
William Martin
ad089d48d9 Update microsoft dev-tunnels to v0.1.13
https://github.com/microsoft/dev-tunnels/pull/322 introduced a few
breaking changes:
 * Port Tags were renamed to Labels
 * Client construction must now provide an API version (of which there is only one)
 * The /api/v1 prefix was dropped from request paths
 * TunnelPortListResponses may now be paginated (but we don't support that)
 * Requests to create a port with a changed protocol began erroring
2025-07-02 16:38:07 +02:00
William Martin
96956da8de Bump all dependencies except dev-tunnels 2025-07-02 14:56:58 +02:00
dependabot[bot]
f55443d7b0
chore(deps): bump github.com/google/go-containerregistry
Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.20.3 to 0.20.6.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](https://github.com/google/go-containerregistry/compare/v0.20.3...v0.20.6)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 10:05:53 +00:00
William Martin
b4cd2273d8 Bump to Go 1.24 2025-06-17 11:44:14 +02:00
dependabot[bot]
32a7400e22
chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
Bumps [github.com/in-toto/attestation](https://github.com/in-toto/attestation) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](https://github.com/in-toto/attestation/compare/v1.1.1...v1.1.2)

---
updated-dependencies:
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 16:02:19 +00:00
William Martin
b83d335f2f
Merge pull request #11033 from cli/dependabot/go_modules/google.golang.org/grpc-1.72.2
chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
2025-06-11 15:45:22 +02:00
dependabot[bot]
52bde8a3f7
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
Bumps [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) from 0.4.2 to 0.4.3.
- [Release notes](https://github.com/sigstore/protobuf-specs/releases)
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/protobuf-specs/compare/v0.4.2...v0.4.3)

---
updated-dependencies:
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-10 14:52:22 +00:00
Kynan Ware
6cfe8ca0e2 Update go-gh to v2.12.1 2025-05-29 13:56:54 -06:00
Meredith Lancaster
23382f498e Merge branch 'trunk' into gh-attestation-tuf-client-retry 2025-05-28 10:24:32 -06:00
Kynan Ware
2cdee009a3
Merge pull request #11032 from cli/dependabot/go_modules/github.com/yuin/goldmark-1.7.12
chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
2025-05-28 10:13:30 -06:00
dependabot[bot]
8fcb206de4
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
Bumps [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/sigstore/protobuf-specs/releases)
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/protobuf-specs/compare/v0.4.1...v0.4.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-28 15:47:41 +00:00
dependabot[bot]
ed57df1a9a
chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.0 to 1.72.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.72.0...v1.72.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.72.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-28 14:26:44 +00:00
dependabot[bot]
f8e092cbb7
chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
Bumps [github.com/yuin/goldmark](https://github.com/yuin/goldmark) from 1.7.8 to 1.7.12.
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](https://github.com/yuin/goldmark/compare/v1.7.8...v1.7.12)

---
updated-dependencies:
- dependency-name: github.com/yuin/goldmark
  dependency-version: 1.7.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-28 14:26:37 +00:00
Meredith Lancaster
f2f769c23a Merge branch 'trunk' into gh-attestation-tuf-client-retry 2025-05-27 10:14:35 -06:00
Meredith Lancaster
1ebed2678a update sigstore-go to v1
Signed-off-by: Meredith Lancaster <malancas@github.com>
2025-05-27 09:27:12 -06:00
Kynan Ware
b044a76080
Merge pull request #10825 from cli/dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.9
chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
2025-05-27 08:58:08 -06:00
Babak K. Shandiz
34431ab074
chore: run go mod tidy
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-05-21 12:20:08 +01:00
Meredith Lancaster
3950e84eef import sigstore-go at a more recent commit
Signed-off-by: Meredith Lancaster <malancas@github.com>
2025-05-08 14:34:07 -06:00
Meredith Lancaster
d6068820d3 get the latest go-tuf release
Signed-off-by: Meredith Lancaster <malancas@github.com>
2025-05-07 09:18:30 -06:00
Meredith Lancaster
2b1ec2fe16 get latest go-tuf version
Signed-off-by: Meredith Lancaster <malancas@github.com>
2025-05-07 08:51:56 -06:00
Meredith Lancaster
c5a2defec8 Merge branch 'trunk' into gh-attestation-tuf-client-retry 2025-05-07 08:50:51 -06:00
Andy Feller
913d13539d
Merge pull request #10869 from cli/dependabot/go_modules/github.com/cpuguy83/go-md2man/v2-2.0.7
chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
2025-05-01 08:20:27 -04:00
Andy Feller
97a3b70599 Update to huh@0.7.0, echo mode changes
This commit is the initial change around updating to huh@0.7.0; pre-testing changes.
2025-04-26 12:57:10 -04:00
dependabot[bot]
abd98bd727
chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
Bumps [github.com/cpuguy83/go-md2man/v2](https://github.com/cpuguy83/go-md2man) from 2.0.6 to 2.0.7.
- [Release notes](https://github.com/cpuguy83/go-md2man/releases)
- [Commits](https://github.com/cpuguy83/go-md2man/compare/v2.0.6...v2.0.7)

---
updated-dependencies:
- dependency-name: github.com/cpuguy83/go-md2man/v2
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-25 15:00:36 +00:00
Meredith Lancaster
fcd23dc657 create fetcher with custom http client and retry options
Signed-off-by: Meredith Lancaster <malancas@github.com>
2025-04-24 08:55:57 -06:00
dependabot[bot]
b63084cab5
chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.8 to 1.4.9.
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](https://github.com/gabriel-vasile/mimetype/compare/v1.4.8...v1.4.9)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-18 14:47:00 +00:00
Kynan Ware
0ffc887644
Merge pull request #10758 from cli/dependabot/go_modules/google.golang.org/grpc-1.71.1
Bump google.golang.org/grpc from 1.71.0 to 1.71.1
2025-04-17 13:35:06 -06:00
dependabot[bot]
7293c1651e
chore(deps): bump github.com/sigstore/sigstore-go from 0.7.1 to 0.7.2
Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 0.7.1 to 0.7.2.
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v0.7.1...v0.7.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 0.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-14 14:07:09 +00:00
Kynan Ware
2f5e896535 fix(prompter): update huh and fix tests 2025-04-09 15:18:53 -06:00
dependabot[bot]
0311a8b05b
Bump google.golang.org/grpc from 1.71.0 to 1.71.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.71.0 to 1.71.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.71.0...v1.71.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.71.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-09 15:05:41 +00:00
Kynan Ware
3b2e7f7f71 chore: go mod tidy 2025-04-09 08:13:21 -06:00
Kynan Ware
861563269a Merge branch 'trunk' into kw/first-pass-accessible-prompter 2025-04-09 08:07:56 -06:00
Meredith Lancaster
7b20ee5549
Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
Update github.com/sigstore/sigstore-go to 0.7.1 and fix breaking function change
2025-04-09 11:58:20 +02:00
Kynan Ware
02fc12e7b7 fix(linter): linter errors 2025-04-03 08:51:54 -06:00
Kynan Ware
f7de9e0c11 test(prompter): go-expect based prompter tests 2025-04-02 12:56:44 -06:00
Kynan Ware
202c1ad16b feat(prompter): add accessible prompter support 2025-03-31 15:04:57 -06:00
Kynan Ware
efa1825eff chore: update go-gh to v2.12.0 2025-03-26 10:21:22 -06:00
dependabot[bot]
7901f2364c
Bump golang.org/x/net from 0.34.0 to 0.36.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.34.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.34.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-13 01:52:40 +00:00
dependabot[bot]
3cea9f375b
Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.2 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 22:52:15 +00:00
William Martin
ae2f4b7c5b
Merge pull request #10338 from cli/dependabot/go_modules/github.com/spf13/pflag-1.0.6
Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
2025-02-18 17:06:29 +01:00
dependabot[bot]
3e03f5d106
Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
Bumps google.golang.org/protobuf from 1.36.4 to 1.36.5.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-06 14:17:31 +00:00
dependabot[bot]
015c73005a
Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](https://github.com/spf13/pflag/compare/v1.0.5...v1.0.6)

---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-30 14:25:54 +00:00
Andy Feller
a6c9c511ea
Merge pull request #10319 from cli/dependabot/go_modules/github.com/in-toto/attestation-1.1.1
Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
2025-01-30 08:44:34 -05:00
dependabot[bot]
532be61d6b
Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
Bumps [github.com/in-toto/attestation](https://github.com/in-toto/attestation) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](https://github.com/in-toto/attestation/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: github.com/in-toto/attestation
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 14:35:50 +00:00