registry/go.mod
dependabot[bot] dda760f0a9
build(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 (#1373)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.21.6 to 0.21.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.7</h2>
<h2>What's Changed</h2>
<ul>
<li>tarball: return error instead of panicking on missing
rootfs.diff_ids by <a
href="https://github.com/iahsanGill"><code>@​iahsanGill</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2304">google/go-containerregistry#2304</a></li>
<li>gcrane: honor --platform flag in copy by <a
href="https://github.com/iahsanGill"><code>@​iahsanGill</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2307">google/go-containerregistry#2307</a></li>
<li>mutate: verify layer digests in Extract and Time by <a
href="https://github.com/momenashrafff"><code>@​momenashrafff</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2303">google/go-containerregistry#2303</a></li>
<li>tarball: close layer readers during Write by <a
href="https://github.com/nandbhat"><code>@​nandbhat</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2308">google/go-containerregistry#2308</a></li>
<li>build(deps): bump the actions group across 1 directory with 2
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2311">google/go-containerregistry#2311</a></li>
<li>build(deps): bump github.com/docker/cli from 29.4.3+incompatible to
29.5.2+incompatible in the go-deps group across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2312">google/go-containerregistry#2312</a></li>
<li>BUGFIX: Fail with error when read exceeds maximum by <a
href="https://github.com/inteon"><code>@​inteon</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2328">google/go-containerregistry#2328</a></li>
<li>build(deps): bump the actions group across 1 directory with 2
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2327">google/go-containerregistry#2327</a></li>
<li>fix(name): anchor loopback registry detection by <a
href="https://github.com/rohan-patnaik"><code>@​rohan-patnaik</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2314">google/go-containerregistry#2314</a></li>
<li>Reject symlinks in OCI layout blobs by <a
href="https://github.com/mosskappa"><code>@​mosskappa</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2306">google/go-containerregistry#2306</a></li>
<li>fix(crane): avoid creating export tar on pull failure by <a
href="https://github.com/Haihan-Jiang"><code>@​Haihan-Jiang</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2318">google/go-containerregistry#2318</a></li>
<li>feat(kubernetes): allow ignoring pull secrets by <a
href="https://github.com/rohan-patnaik"><code>@​rohan-patnaik</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2315">google/go-containerregistry#2315</a></li>
<li>fix(name): preserve localhost registry references by <a
href="https://github.com/rohan-patnaik"><code>@​rohan-patnaik</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2316">google/go-containerregistry#2316</a></li>
<li>pkg/registry: export ErrNotFound by <a
href="https://github.com/malt3"><code>@​malt3</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2176">google/go-containerregistry#2176</a></li>
<li>pkg/registry: export RedirectError by <a
href="https://github.com/malt3"><code>@​malt3</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2177">google/go-containerregistry#2177</a></li>
<li>build(deps): bump the go-deps group across 1 directory with 2
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2343">google/go-containerregistry#2343</a></li>
<li>build(deps): bump the actions group across 1 directory with 2
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2344">google/go-containerregistry#2344</a></li>
<li>fix: prevent SSRF in google.List() pagination by <a
href="https://github.com/tufstraka"><code>@​tufstraka</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2332">google/go-containerregistry#2332</a></li>
<li>internal/gzip: fix goroutine leak in ReadCloserLevel by <a
href="https://github.com/amarkdotdev"><code>@​amarkdotdev</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2347">google/go-containerregistry#2347</a></li>
<li>fix(transport): apply refreshed bearer token after cross-host
redirect by <a
href="https://github.com/64johnlee"><code>@​64johnlee</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2337">google/go-containerregistry#2337</a></li>
<li>build(deps): bump the go-deps group across 3 directories with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2348">google/go-containerregistry#2348</a></li>
<li>fix(tarball): normalize paths when matching files by <a
href="https://github.com/bstoll"><code>@​bstoll</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2334">google/go-containerregistry#2334</a></li>
<li>transport: do not re-attach bearer token after cross-host redirect
by <a href="https://github.com/evilgensec"><code>@​evilgensec</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2349">google/go-containerregistry#2349</a></li>
<li>Bump CI go version to 1.26.4 by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2350">google/go-containerregistry#2350</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/momenashrafff"><code>@​momenashrafff</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2303">google/go-containerregistry#2303</a></li>
<li><a href="https://github.com/nandbhat"><code>@​nandbhat</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2308">google/go-containerregistry#2308</a></li>
<li><a href="https://github.com/inteon"><code>@​inteon</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2328">google/go-containerregistry#2328</a></li>
<li><a
href="https://github.com/rohan-patnaik"><code>@​rohan-patnaik</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2314">google/go-containerregistry#2314</a></li>
<li><a href="https://github.com/mosskappa"><code>@​mosskappa</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2306">google/go-containerregistry#2306</a></li>
<li><a
href="https://github.com/Haihan-Jiang"><code>@​Haihan-Jiang</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2318">google/go-containerregistry#2318</a></li>
<li><a href="https://github.com/tufstraka"><code>@​tufstraka</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2332">google/go-containerregistry#2332</a></li>
<li><a
href="https://github.com/amarkdotdev"><code>@​amarkdotdev</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2347">google/go-containerregistry#2347</a></li>
<li><a href="https://github.com/64johnlee"><code>@​64johnlee</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2337">google/go-containerregistry#2337</a></li>
<li><a href="https://github.com/bstoll"><code>@​bstoll</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2334">google/go-containerregistry#2334</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.6...v0.21.7">https://github.com/google/go-containerregistry/compare/v0.21.6...v0.21.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c68d899782"><code>c68d899</code></a>
Bump go version to 1.26.4 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2350">#2350</a>)</li>
<li><a
href="da61d865f8"><code>da61d86</code></a>
transport: do not re-attach bearer token after cross-host redirect (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2349">#2349</a>)</li>
<li><a
href="09fe1e5528"><code>09fe1e5</code></a>
fix(tarball): normalize paths when matching files (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2334">#2334</a>)</li>
<li><a
href="5baa399d09"><code>5baa399</code></a>
build(deps): bump the go-deps group across 3 directories with 4 updates
(<a
href="https://redirect.github.com/google/go-containerregistry/issues/2348">#2348</a>)</li>
<li><a
href="97a8a17e27"><code>97a8a17</code></a>
fix(transport): apply refreshed bearer token after cross-host redirect
(<a
href="https://redirect.github.com/google/go-containerregistry/issues/2337">#2337</a>)</li>
<li><a
href="e9634975f4"><code>e963497</code></a>
internal/gzip: fix goroutine leak in ReadCloserLevel (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2347">#2347</a>)</li>
<li><a
href="02649eab0d"><code>02649ea</code></a>
fix: prevent SSRF in google.List() pagination (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2332">#2332</a>)</li>
<li><a
href="7204b401d3"><code>7204b40</code></a>
build(deps): bump the actions group across 1 directory with 2 updates
(<a
href="https://redirect.github.com/google/go-containerregistry/issues/2344">#2344</a>)</li>
<li><a
href="4cfaa93eb4"><code>4cfaa93</code></a>
build(deps): bump the go-deps group across 1 directory with 2 updates
(<a
href="https://redirect.github.com/google/go-containerregistry/issues/2343">#2343</a>)</li>
<li><a
href="6849394e8a"><code>6849394</code></a>
pkg/registry: export RedirectError (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2177">#2177</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.21.6...v0.21.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.21.6&new-version=0.21.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-25 02:43:06 -04:00

87 lines
4 KiB
Modula-2

module github.com/modelcontextprotocol/registry
go 1.26
require (
cloud.google.com/go/kms v1.31.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.5.0
github.com/caarlos0/env/v11 v11.4.1
github.com/coreos/go-oidc/v3 v3.19.0
github.com/danielgtaylor/huma/v2 v2.38.0
github.com/golang-jwt/jwt/v5 v5.3.1
github.com/google/go-containerregistry v0.21.7
github.com/jackc/pgx/v5 v5.10.0
github.com/prometheus/client_golang v1.23.2
github.com/rs/cors v1.11.1
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
github.com/stretchr/testify v1.11.1
go.opentelemetry.io/contrib/instrumentation/runtime v0.69.0
go.opentelemetry.io/otel v1.44.0
go.opentelemetry.io/otel/exporters/prometheus v0.66.0
go.opentelemetry.io/otel/metric v1.44.0
go.opentelemetry.io/otel/sdk v1.44.0
go.opentelemetry.io/otel/sdk/metric v1.44.0
golang.org/x/mod v0.37.0
gopkg.in/yaml.v3 v3.0.1
)
require (
cloud.google.com/go v0.123.0 // indirect
cloud.google.com/go/auth v0.18.2 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
cloud.google.com/go/iam v1.7.0 // indirect
cloud.google.com/go/longrunning v0.9.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 // indirect
github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/docker/cli v29.5.3+incompatible // indirect
github.com/docker/docker-credential-helpers v0.9.3 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
github.com/googleapis/gax-go/v2 v2.21.0 // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
github.com/jackc/puddle/v2 v2.2.2 // indirect
github.com/klauspost/compress v1.18.6 // indirect
github.com/kylelemons/godebug v1.1.0 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
github.com/prometheus/client_model v0.6.2 // indirect
github.com/prometheus/common v0.67.5 // indirect
github.com/prometheus/otlptranslator v1.0.0 // indirect
github.com/prometheus/procfs v0.20.1 // indirect
github.com/sirupsen/logrus v1.9.4 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
go.opentelemetry.io/otel/trace v1.44.0 // indirect
go.yaml.in/yaml/v2 v2.4.4 // indirect
golang.org/x/crypto v0.51.0 // indirect
golang.org/x/net v0.55.0 // indirect
golang.org/x/oauth2 v0.36.0 // indirect
golang.org/x/sync v0.21.0 // indirect
golang.org/x/sys v0.46.0 // indirect
golang.org/x/text v0.37.0 // indirect
golang.org/x/time v0.15.0 // indirect
google.golang.org/api v0.274.0 // indirect
google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260401001100-f93e5f3e9f0f // indirect
google.golang.org/grpc v1.80.0 // indirect
google.golang.org/protobuf v1.36.11 // indirect
gotest.tools/v3 v3.5.2 // indirect
)