Skip to content

Bump the go_modules group across 2 directories with 13 updates #1482

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
+179 −432
Open

Bump the go_modules group across 2 directories with 13 updates #1482

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
78 changes: 38 additions & 40 deletions tests/e2e/go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/openshift/oc-mirror-tests-extension

go 1.24.6
go 1.25.0

require (
github.com/onsi/ginkgo/v2 v2.28.1
Expand All @@ -14,11 +14,11 @@ require (
)

require (
cel.dev/expr v0.24.0 // indirect
cel.dev/expr v0.25.1 // indirect
cloud.google.com/go v0.121.6 // indirect
cloud.google.com/go/auth v0.16.5 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.8.0 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
Comment on lines +17 to +21

@coderabbitai coderabbitai Bot Jul 31, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟠 Major | 🏗️ Heavy lift

🧩 Analysis chain

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

for dir in tests/e2e tests/integration; do
  tmp="$(mktemp -d)"
  cp -a "$dir"/. "$tmp"/

  (
    cd "$tmp"
    go mod tidy
    go mod download all
    go mod verify
  )

  diff -u "$dir/go.mod" "$tmp/go.mod"
  diff -u "$dir/go.sum" "$tmp/go.sum"
done

Repository: openshift/oc-mirror

Length of output: 378

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- module files ---'
for f in tests/e2e/go.mod tests/integration/go.mod tests/e2e/go.sum tests/integration/go.sum; do
  if [ -f "$f" ]; then
    printf '\n[%s]\n' "$f"
    wc -l "$f"
    sed -n '1,280p' "$f"
  fi
done

printf '%s\n' '--- repository changes ---'
git diff --stat
git status --short

printf '%s\n' '--- build, SBOM, provenance, and signing references ---'
rg -n -i --glob '!vendor/**' \
  'syft|sbom|cyclonedx|spdx|provenance|attest|cosign|sigstore|slsa|go mod verify|osv|govulncheck' \
  .github .tekton Makefile* Dockerfile* tests 2>/dev/null || true

printf '%s\n' '--- dependency and license metadata ---'
find . -maxdepth 3 -type f \( -iname 'LICENSE*' -o -iname 'NOTICE*' -o -iname 'THIRD_PARTY*' -o -iname 'bom*' \) -print

Repository: openshift/oc-mirror

Length of output: 50376

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- invalid module references ---'
rg -n -C 3 'k8s\.io/externaljwt|v0\.0\.0' --glob 'go.mod' --glob 'go.sum' .

printf '%s\n' '--- relevant diffs ---'
git diff -- tests/e2e/go.mod tests/e2e/go.sum tests/integration/go.mod tests/integration/go.sum | \
  rg -n -C 4 '^(\+|-)($|[^+-])|^@@' | head -n 500 || true

printf '%s\n' '--- workflow and build files ---'
git ls-files '.github/**' '.tekton/**' 'Makefile*' 'Dockerfile*' 'hack/**' | head -n 300

printf '%s\n' '--- supply-chain controls ---'
rg -n -i --glob '!**/go.sum' --glob '!vendor/**' \
  'osv|govulncheck|license|sbom|cyclonedx|spdx|syft|provenance|attestation|cosign|sigstore|slsa|rekor|go mod verify' \
  .github .tekton Makefile* Dockerfile* hack tests 2>/dev/null | head -n 500 || true

Repository: openshift/oc-mirror

Length of output: 50376

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- exact externaljwt references ---'
rg -n -F 'k8s.io/externaljwt' . || true

printf '%s\n' '--- exact zero-version references in module manifests ---'
rg -n -F 'k8s.io/externaljwt v0.0.0' --glob 'go.mod' --glob 'go.sum' . || true

printf '%s\n' '--- changed files and changed module lines ---'
git diff --name-status
git diff --numstat
git diff --unified=0 -- tests/e2e/go.mod tests/e2e/go.sum tests/integration/go.mod tests/integration/go.sum | \
  sed -n '1,500p'

printf '%s\n' '--- control-file paths ---'
git ls-files | rg '(^|/)(\.github|\.tekton|Makefile|Dockerfile|hack)(/|$)' | head -n 300

printf '%s\n' '--- supply-chain control matches outside dependency lockfiles ---'
rg -n -i \
  --glob '!**/go.sum' \
  --glob '!**/vendor/**' \
  --glob '!**/node_modules/**' \
  'osv|govulncheck|license|sbom|cyclonedx|spdx|syft|provenance|attestation|cosign|sigstore|slsa|rekor|go mod verify' \
  .github .tekton Makefile* Dockerfile* hack tests 2>/dev/null | head -n 300 || true

Repository: openshift/oc-mirror

Length of output: 50375

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- transitive module metadata ---'
for spec in \
  'k8s.io/kubernetes v1.34.1' \
  'k8s.io/apimachinery v0.34.1' \
  'k8s.io/component-base v0.34.1' \
  'github.com/openshift/origin v1.5.2' \
  'github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818'
do
  module="${spec% *}"
  version="${spec##* }"
  url="https://proxy.golang.org/${module}/@v/${version}.mod"
  printf '\n[%s]\n' "$url"
  curl -fsSL "$url" | rg -n -C 2 'externaljwt|require \(' || true
done

printf '%s\n' '--- OSV results for declared test-module requirements ---'
python3 - <<'PY'
import json
import re
import urllib.request

mods = []
for path in ("tests/e2e/go.mod", "tests/integration/go.mod"):
    text = open(path, encoding="utf-8").read()
    for module, version in re.findall(r"^\s*([^\s]+)\s+([^\s]+)(?:\s+//.*)?$", text, re.M):
        if module == "module" or module == "go" or version.startswith("("):
            continue
        mods.append({"package": {"name": module, "ecosystem": "Go"}, "version": version})

# Remove duplicate module/version queries.
queries = []
seen = set()
for item in mods:
    key = (item["package"]["name"], item["version"])
    if key not in seen:
        seen.add(key)
        queries.append(item)

payload = json.dumps({"queries": queries}).encode()
request = urllib.request.Request(
    "https://api.osv.dev/v1/querybatch",
    data=payload,
    headers={"Content-Type": "application/json"},
)
with urllib.request.urlopen(request, timeout=60) as response:
    result = json.load(response)

findings = []
for query, result_item in zip(queries, result.get("results", [])):
    vulns = result_item.get("vulns") or []
    if vulns:
        findings.append({
            "module": query["package"]["name"],
            "version": query["version"],
            "ids": [v.get("id") for v in vulns],
        })

print(json.dumps({
    "queried": len(queries),
    "vulnerable_requirements": findings,
}, indent=2, sort_keys=True))
PY

Repository: openshift/oc-mirror

Length of output: 5729

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- transitive module metadata ---'
for spec in \
  'k8s.io/kubernetes v1.34.1' \
  'k8s.io/apimachinery v0.34.1' \
  'k8s.io/component-base v0.34.1' \
  'github.com/openshift/origin v1.5.2' \
  'github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818'
do
  module="${spec% *}"
  version="${spec##* }"
  url="https://proxy.golang.org/${module}/@v/${version}.mod"
  printf '\n[%s]\n' "$url"
  curl -fsSL "$url" | rg -n -C 2 'externaljwt|require \(' || true
done

printf '%s\n' '--- OSV results for declared test-module requirements ---'
python3 - <<'PY'
import json
import re
import urllib.request

mods = []
for path in ("tests/e2e/go.mod", "tests/integration/go.mod"):
    text = open(path, encoding="utf-8").read()
    for module, version in re.findall(r"^\s*([^\s]+)\s+([^\s]+)(?:\s+//.*)?$", text, re.M):
        if module == "module" or module == "go" or version.startswith("("):
            continue
        mods.append({"package": {"name": module, "ecosystem": "Go"}, "version": version})

queries = []
seen = set()
for item in mods:
    key = (item["package"]["name"], item["version"])
    if key not in seen:
        seen.add(key)
        queries.append(item)

payload = json.dumps({"queries": queries}).encode()
request = urllib.request.Request(
    "https://api.osv.dev/v1/querybatch",
    data=payload,
    headers={"Content-Type": "application/json"},
)
with urllib.request.urlopen(request, timeout=60) as response:
    result = json.load(response)

findings = []
for query, result_item in zip(queries, result.get("results", [])):
    vulns = result_item.get("vulns") or []
    if vulns:
        findings.append({
            "module": query["package"]["name"],
            "version": query["version"],
            "ids": [v.get("id") for v in vulns],
        })

print(json.dumps({
    "queried": len(queries),
    "vulnerable_requirements": findings,
}, indent=2, sort_keys=True))
PY

Repository: openshift/oc-mirror

Length of output: 5729

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

for dir in tests/e2e tests/integration; do
  printf '\n--- %s: go mod download ---\n' "$dir"
  (
    cd "$dir"
    go mod download all
  ) 2>&1 || true

  printf '%s\n' "--- $dir: go mod verify ---"
  (
    cd "$dir"
    go mod verify
  ) 2>&1 || true
done

printf '%s\n' '--- OSV results for declared requirements ---'
python3 - <<'PY' >/tmp/osv-queries.json
import json
import re

queries = []
seen = set()
for path in ("tests/e2e/go.mod", "tests/integration/go.mod"):
    text = open(path, encoding="utf-8").read()
    for line in text.splitlines():
        match = re.match(r"^\s*([^\s()]+)\s+([^\s]+)(?:\s+//.*)?$", line)
        if not match:
            continue
        module, version = match.groups()
        if module in {"module", "go"}:
            continue
        key = (module, version)
        if key not in seen:
            seen.add(key)
            queries.append({
                "package": {"name": module, "ecosystem": "Go"},
                "version": version,
            })
json.dump({"queries": queries}, __import__("sys").stdout)
PY

curl -ksSf \
  -H 'Content-Type: application/json' \
  --data-binary `@/tmp/osv-queries.json` \
  https://api.osv.dev/v1/querybatch |
python3 -c '
import json, sys
data=json.load(sys.stdin)
findings=[]
for query, result in zip(json.load(open("/tmp/osv-queries.json"))["queries"], data.get("results", [])):
    vulns=result.get("vulns") or []
    if vulns:
        findings.append({
            "module": query["package"]["name"],
            "version": query["version"],
            "ids": [v["id"] for v in vulns],
        })
print(json.dumps({"queried": len(json.load(open("/tmp/osv-queries.json"))["queries"]), "findings": findings}, indent=2))
'

Repository: openshift/oc-mirror

Length of output: 3482

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

for dir in tests/e2e tests/integration; do
  printf '\n--- %s: go mod download ---\n' "$dir"
  (
    cd "$dir"
    go mod download all
  ) 2>&1 || true

  printf '%s\n' "--- $dir: go mod verify ---"
  (
    cd "$dir"
    go mod verify
  ) 2>&1 || true
done

printf '%s\n' '--- OSV results for declared requirements ---'
python3 - <<'PY' >/tmp/osv-queries.json
import json
import re

queries = []
seen = set()
for path in ("tests/e2e/go.mod", "tests/integration/go.mod"):
    text = open(path, encoding="utf-8").read()
    for line in text.splitlines():
        match = re.match(r"^\s*([^\s()]+)\s+([^\s]+)(?:\s+//.*)?$", line)
        if not match:
            continue
        module, version = match.groups()
        if module in {"module", "go"}:
            continue
        key = (module, version)
        if key not in seen:
            seen.add(key)
            queries.append({
                "package": {"name": module, "ecosystem": "Go"},
                "version": version,
            })
json.dump({"queries": queries}, __import__("sys").stdout)
PY

curl -ksSf \
  -H 'Content-Type: application/json' \
  --data-binary `@/tmp/osv-queries.json` \
  https://api.osv.dev/v1/querybatch |
python3 -c '
import json, sys
data=json.load(sys.stdin)
queries=json.load(open("/tmp/osv-queries.json"))["queries"]
findings=[]
for query, result in zip(queries, data.get("results", [])):
    vulns=result.get("vulns") or []
    if vulns:
        findings.append({
            "module": query["package"]["name"],
            "version": query["version"],
            "ids": [v["id"] for v in vulns],
        })
print(json.dumps({"queried": len(queries), "findings": findings}, indent=2))
'

Repository: openshift/oc-mirror

Length of output: 3482

Fix the dependency graph and triage OSV findings before merge.

tests/e2e cannot download its graph because k8s.io/kubernetes v1.34.1 requires k8s.io/externaljwt v0.0.0, which has no published revision. Use a consumable module version. The passing go mod verify result does not cover the failed download.

The declared graph contains OSV findings for Kubernetes, AWS SDK, Docker, runc, golang.org/x/{crypto,net,text}, and OpenTelemetry modules. Upgrade, remove, or document each finding. Record license compatibility. Then run go mod verify and OSV against the complete graph. If this build produces artifacts, emit a signed SBOM and provenance attestation, and verify artifact signatures with Sigstore/cosign.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@tests/e2e/go.mod` around lines 17 - 21, The tests/e2e go.mod has a broken
dependency chain where k8s.io/kubernetes v1.34.1 requires the unpublished
k8s.io/externaljwt v0.0.0, which prevents graph download. Additionally, there
are unaddressed OSV findings across Kubernetes, AWS SDK, Docker, runc,
golang.org/x modules, and OpenTelemetry. Update k8s.io/kubernetes to a
consumable version without this broken transitive dependency, then
systematically address each OSV finding by upgrading to patched versions,
removing unused modules, or documenting acceptance. Record license compatibility
for all dependencies, run go mod verify on the complete graph, and run OSV
scanning. If build artifacts are produced, emit a signed SBOM and provenance
attestation and verify artifact signatures.

Source: Path instructions

cloud.google.com/go/iam v1.5.2 // indirect
cloud.google.com/go/monitoring v1.24.2 // indirect
cloud.google.com/go/storage v1.56.0 // indirect
Expand All @@ -45,7 +45,7 @@ require (
github.com/Azure/go-autorest/logger v0.2.1 // indirect
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.32.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0 // indirect
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.53.0 // indirect
github.com/IBM-Cloud/power-go-client v1.12.0 // indirect
Expand All @@ -69,8 +69,8 @@ require (
github.com/cenkalti/backoff/v5 v5.0.2 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/chai2010/gettext-go v1.0.2 // indirect
github.com/cloudflare/circl v1.6.0 // indirect
github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443 // indirect
github.com/cloudflare/circl v1.6.3 // indirect
github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect
github.com/container-storage-interface/spec v1.9.0 // indirect
github.com/containerd/containerd/api v1.8.0 // indirect
github.com/containerd/errdefs v1.0.0 // indirect
Expand All @@ -81,16 +81,16 @@ require (
github.com/coreos/go-semver v0.3.1 // indirect
github.com/coreos/go-systemd/v22 v22.5.0 // indirect
github.com/coreos/stream-metadata-go v0.4.9 // indirect
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
github.com/cyphar/filepath-securejoin v0.5.1 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/dimchansky/utfbom v1.1.1 // indirect
github.com/distribution/reference v0.6.0 // indirect
github.com/docker/docker v27.3.1+incompatible // indirect
github.com/docker/go-connections v0.5.0 // indirect
github.com/docker/go-units v0.5.0 // indirect
github.com/emicklei/go-restful/v3 v3.13.0 // indirect
github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
github.com/envoyproxy/go-control-plane/envoy v1.37.0 // indirect
github.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect
github.com/euank/go-kmsg-parser v2.0.0+incompatible // indirect
github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
github.com/fatih/camelcase v1.0.0 // indirect
Expand All @@ -102,7 +102,7 @@ require (
github.com/gebn/bmc v0.0.0-20250519231546-bf709e03fe3c // indirect
github.com/ghodss/yaml v1.0.1-0.20190212211648-25d852aebe32 // indirect
github.com/go-errors/errors v1.4.2 // indirect
github.com/go-jose/go-jose/v4 v4.1.1 // indirect
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/go-openapi/analysis v0.23.0 // indirect
Expand All @@ -127,7 +127,7 @@ require (
github.com/golang/protobuf v1.5.4 // indirect
github.com/google/btree v1.1.3 // indirect
github.com/google/cadvisor v0.52.1 // indirect
github.com/google/cel-go v0.26.1 // indirect
github.com/google/cel-go v0.29.0 // indirect
github.com/google/gnostic-models v0.7.0 // indirect
github.com/google/go-cmp v0.7.0 // indirect
github.com/google/gopacket v1.1.19 // indirect
Expand All @@ -140,7 +140,7 @@ require (
github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.0 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 // indirect
github.com/hashicorp/go-checkpoint v0.5.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
Expand All @@ -164,7 +164,7 @@ require (
github.com/mattn/go-isatty v0.0.20 // indirect
github.com/microsoft/kiota-abstractions-go v1.9.3 // indirect
github.com/microsoft/kiota-authentication-azure-go v1.3.0 // indirect
github.com/microsoft/kiota-http-go v1.5.2 // indirect
github.com/microsoft/kiota-http-go v1.5.5 // indirect
github.com/microsoft/kiota-serialization-form-go v1.1.2 // indirect
github.com/microsoft/kiota-serialization-json-go v1.1.2 // indirect
github.com/microsoft/kiota-serialization-multipart-go v1.1.2 // indirect
Expand All @@ -177,7 +177,7 @@ require (
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/moby/docker-image-spec v1.3.1 // indirect
github.com/moby/patternmatcher v0.6.0 // indirect
github.com/moby/spdystream v0.5.0 // indirect
github.com/moby/spdystream v0.5.1 // indirect
github.com/moby/sys/mountinfo v0.7.2 // indirect
github.com/moby/sys/sequential v0.6.0 // indirect
github.com/moby/sys/user v0.4.0 // indirect
Expand All @@ -195,7 +195,7 @@ require (
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/opencontainers/runc v1.2.5 // indirect
github.com/opencontainers/runtime-spec v1.2.0 // indirect
github.com/opencontainers/selinux v1.11.1 // indirect
github.com/opencontainers/selinux v1.15.1 // indirect
github.com/openshift/api v0.0.0-20260114133223-6ab113cb7368 // indirect
github.com/openshift/client-go v0.0.0-20260108185524-48f4ccfc4e13 // indirect
github.com/openshift/library-go v0.0.0-20251015151611-6fc7a74b67c5 // indirect
Expand All @@ -214,9 +214,8 @@ require (
github.com/russross/blackfriday/v2 v2.1.0 // indirect
github.com/sirupsen/logrus v1.9.3 // indirect
github.com/spf13/pflag v1.0.9 // indirect
github.com/spiffe/go-spiffe/v2 v2.5.0 // indirect
github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
github.com/std-uritemplate/std-uritemplate/go/v2 v2.0.3 // indirect
github.com/stoewer/go-strcase v1.3.1 // indirect
github.com/stretchr/objx v0.5.2 // indirect
github.com/stretchr/testify v1.11.1 // indirect
github.com/tecbiz-ch/nutanix-go-sdk v0.1.15 // indirect
Expand All @@ -227,46 +226,45 @@ require (
github.com/x448/float16 v0.8.4 // indirect
github.com/xlab/treeprint v1.2.0 // indirect
github.com/zclconf/go-cty v1.16.2 // indirect
github.com/zeebo/errs v1.4.0 // indirect
go.etcd.io/etcd/api/v3 v3.6.4 // indirect
go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect
go.etcd.io/etcd/client/v3 v3.6.4 // indirect
go.mongodb.org/mongo-driver v1.17.3 // indirect
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 // indirect
go.mongodb.org/mongo-driver v1.17.7 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/contrib/detectors/gcp v1.43.0 // indirect
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful v0.44.0 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
go.opentelemetry.io/otel v1.37.0 // indirect
go.opentelemetry.io/otel v1.43.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.36.0 // indirect
go.opentelemetry.io/otel/metric v1.37.0 // indirect
go.opentelemetry.io/otel/sdk v1.37.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.37.0 // indirect
go.opentelemetry.io/otel/trace v1.37.0 // indirect
go.opentelemetry.io/proto/otlp v1.7.0 // indirect
go.opentelemetry.io/otel/metric v1.43.0 // indirect
go.opentelemetry.io/otel/sdk v1.43.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
go.opentelemetry.io/otel/trace v1.43.0 // indirect
go.opentelemetry.io/proto/otlp v1.9.0 // indirect
go.uber.org/atomic v1.11.0 // indirect
go.uber.org/multierr v1.11.0 // indirect
go.uber.org/zap v1.27.0 // indirect
go.yaml.in/yaml/v2 v2.4.2 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
golang.org/x/crypto v0.47.0 // indirect
golang.org/x/crypto v0.52.0 // indirect
golang.org/x/exp v0.0.0-20250620022241-b7579e27df2b // indirect
golang.org/x/mod v0.32.0 // indirect
golang.org/x/net v0.49.0 // indirect
golang.org/x/oauth2 v0.30.0 // indirect
golang.org/x/sync v0.19.0 // indirect
golang.org/x/sys v0.40.0 // indirect
golang.org/x/term v0.39.0 // indirect
golang.org/x/text v0.33.0 // indirect
golang.org/x/mod v0.35.0 // indirect
golang.org/x/net v0.54.0 // indirect
golang.org/x/oauth2 v0.36.0 // indirect
golang.org/x/sync v0.20.0 // indirect
golang.org/x/sys v0.45.0 // indirect
golang.org/x/term v0.43.0 // indirect
golang.org/x/text v0.37.0 // indirect
golang.org/x/time v0.12.0 // indirect
golang.org/x/tools v0.41.0 // indirect
golang.org/x/tools v0.44.0 // indirect
google.golang.org/api v0.247.0 // indirect
google.golang.org/genproto v0.0.0-20250603155806-513f23925822 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20250818200422-3122310a409c // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20250826171959-ef028d996bc1 // indirect
google.golang.org/grpc v1.75.1 // indirect
google.golang.org/protobuf v1.36.8 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 // indirect
google.golang.org/grpc v1.82.1 // indirect
google.golang.org/protobuf v1.36.11 // indirect
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
gopkg.in/go-jose/go-jose.v2 v2.6.3 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
Expand Down
Loading