1e0f067064
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/cloudflare/circl](https://redirect.github.com/cloudflare/circl) | indirect | patch | `v1.6.1` -> `v1.6.3` | ### GitHub Vulnerability Alerts #### [CVE-2026-1229](https://redirect.github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x) The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in **[v1.6.3](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.3)**. --- ### Release Notes <details> <summary>cloudflare/circl (github.com/cloudflare/circl)</summary> ### [`v1.6.3`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.3): CIRCL v1.6.3 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.2...v1.6.3) ##### CIRCL v1.6.3 Fix a bug on ecc/p384 scalar multiplication. ##### What's Changed - sign/mldsa: Check opts for nil value by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/582](https://redirect.github.com/cloudflare/circl/pull/582) - ecc/p384: Point addition must handle point doubling case. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/583](https://redirect.github.com/cloudflare/circl/pull/583) - Release CIRCL v1.6.3 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/584](https://redirect.github.com/cloudflare/circl/pull/584) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.6.2...v1.6.3 ### [`v1.6.2`](https://redirect.github.com/cloudflare/circl/releases/tag/v1.6.2): CIRCL v1.6.2 [Compare Source](https://redirect.github.com/cloudflare/circl/compare/v1.6.1...v1.6.2) ##### CIRCL v1.6.2 - New SLH-DSA, improvements in ML-DSA for arm64. - Tested compilation on WASM. ##### What's Changed - Optimize pairing product computation by moving exponentiations to G1. by [@​dfaranha](https://redirect.github.com/dfaranha) in [https://github.com/cloudflare/circl/pull/547](https://redirect.github.com/cloudflare/circl/pull/547) - sign: Adding SLH-DSA signature by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/512](https://redirect.github.com/cloudflare/circl/pull/512) - Update code generators to CIRCL v1.6.1. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/548](https://redirect.github.com/cloudflare/circl/pull/548) - ML-DSA: Add preliminary Wycheproof test vectors by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/552](https://redirect.github.com/cloudflare/circl/pull/552) - go fmt by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/554](https://redirect.github.com/cloudflare/circl/pull/554) - gz-compressing test vectors, use of HexBytes and ReadGzip functions. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/555](https://redirect.github.com/cloudflare/circl/pull/555) - group: Removes use of elliptic Marshal and Unmarshal functions. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/556](https://redirect.github.com/cloudflare/circl/pull/556) - Support encoding/decoding ML-DSA private keys (as long as they contain seeds) by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/559](https://redirect.github.com/cloudflare/circl/pull/559) - Update to golangci-lint v2 by [@​bwesterb](https://redirect.github.com/bwesterb) in [https://github.com/cloudflare/circl/pull/560](https://redirect.github.com/cloudflare/circl/pull/560) - Preparation for ARM64 Implementation of poly operations for dilithium package. by [@​elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/562](https://redirect.github.com/cloudflare/circl/pull/562) - prepare power2Round for custom implementations in assembly by [@​elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/564](https://redirect.github.com/cloudflare/circl/pull/564) - ARM64 implementation for poly.PackLe16 by [@​elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/563](https://redirect.github.com/cloudflare/circl/pull/563) - add arm64 version of polyMulBy2toD by [@​elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/565](https://redirect.github.com/cloudflare/circl/pull/565) - add arm64 version of polySub by [@​elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/566](https://redirect.github.com/cloudflare/circl/pull/566) - group: add byteLen method for short groups and RandomScalar uses rand.Int by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/568](https://redirect.github.com/cloudflare/circl/pull/568) - add arm64 version of poly.Add/Sub by [@​elementrics](https://redirect.github.com/elementrics) in [https://github.com/cloudflare/circl/pull/572](https://redirect.github.com/cloudflare/circl/pull/572) - group: Adding cryptobyte marshaling to scalars by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/569](https://redirect.github.com/cloudflare/circl/pull/569) - Bumping up to Go1.25 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/574](https://redirect.github.com/cloudflare/circl/pull/574) - ci: Including WASM compilation. by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/577](https://redirect.github.com/cloudflare/circl/pull/577) - Revert to using package-declared HPKE errors for shortkem instead of standard library errors by [@​harshiniwho](https://redirect.github.com/harshiniwho) in [https://github.com/cloudflare/circl/pull/578](https://redirect.github.com/cloudflare/circl/pull/578) - Release v1.6.2 by [@​armfazh](https://redirect.github.com/armfazh) in [https://github.com/cloudflare/circl/pull/579](https://redirect.github.com/cloudflare/circl/pull/579) ##### New Contributors - [@​dfaranha](https://redirect.github.com/dfaranha) made their first contribution in [https://github.com/cloudflare/circl/pull/547](https://redirect.github.com/cloudflare/circl/pull/547) - [@​elementrics](https://redirect.github.com/elementrics) made their first contribution in [https://github.com/cloudflare/circl/pull/562](https://redirect.github.com/cloudflare/circl/pull/562) - [@​harshiniwho](https://redirect.github.com/harshiniwho) made their first contribution in [https://github.com/cloudflare/circl/pull/578](https://redirect.github.com/cloudflare/circl/pull/578) **Full Changelog**: https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Monday through Friday ( * * * * 1-5 ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19--> --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: pulumi-bot <bot@pulumi.com>
102 lines
4.8 KiB
Modula-2
Generated
102 lines
4.8 KiB
Modula-2
Generated
module github.com/pulumi/pulumi-docker-build/sdk/go/dockerbuild
|
|
|
|
go 1.25.0
|
|
|
|
require (
|
|
github.com/blang/semver v3.5.1+incompatible
|
|
github.com/pulumi/pulumi/sdk/v3 v3.223.0
|
|
)
|
|
|
|
require (
|
|
dario.cat/mergo v1.0.1 // indirect
|
|
github.com/Microsoft/go-winio v0.6.2 // indirect
|
|
github.com/ProtonMail/go-crypto v1.2.0 // indirect
|
|
github.com/agext/levenshtein v1.2.3 // indirect
|
|
github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
|
|
github.com/atotto/clipboard v0.1.4 // indirect
|
|
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
|
|
github.com/charmbracelet/bubbles v1.0.0 // indirect
|
|
github.com/charmbracelet/bubbletea v1.3.10 // indirect
|
|
github.com/charmbracelet/colorprofile v0.4.2 // indirect
|
|
github.com/charmbracelet/lipgloss v1.1.0 // indirect
|
|
github.com/charmbracelet/x/ansi v0.11.6 // indirect
|
|
github.com/charmbracelet/x/cellbuf v0.0.15 // indirect
|
|
github.com/charmbracelet/x/term v0.2.2 // indirect
|
|
github.com/cheggaaa/pb v1.0.29 // indirect
|
|
github.com/clipperhouse/displaywidth v0.10.0 // indirect
|
|
github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
|
|
github.com/cloudflare/circl v1.6.3 // indirect
|
|
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/djherbis/times v1.6.0 // indirect
|
|
github.com/emirpasic/gods v1.18.1 // indirect
|
|
github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
|
|
github.com/fatih/color v1.17.0 // indirect
|
|
github.com/frankban/quicktest v1.14.6 // indirect
|
|
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
|
|
github.com/go-git/go-billy/v5 v5.6.2 // indirect
|
|
github.com/go-git/go-git/v5 v5.16.5 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang/glog v1.2.5 // indirect
|
|
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
|
|
github.com/google/uuid v1.6.0 // indirect
|
|
github.com/grpc-ecosystem/grpc-opentracing v0.0.0-20180507213350-8e809c8a8645 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/hashicorp/hcl/v2 v2.24.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
github.com/kevinburke/ssh_config v1.2.0 // indirect
|
|
github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/mattn/go-localereader v0.0.1 // indirect
|
|
github.com/mattn/go-runewidth v0.0.20 // indirect
|
|
github.com/mitchellh/go-ps v1.0.0 // indirect
|
|
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
|
|
github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
|
|
github.com/muesli/cancelreader v0.2.2 // indirect
|
|
github.com/muesli/termenv v0.16.0 // indirect
|
|
github.com/opentracing/basictracer-go v1.1.0 // indirect
|
|
github.com/opentracing/opentracing-go v1.2.0 // indirect
|
|
github.com/pgavlin/fx v0.1.6 // indirect
|
|
github.com/pgavlin/fx/v2 v2.0.10 // indirect
|
|
github.com/pjbgf/sha1cd v0.3.2 // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/pkg/term v1.1.0 // indirect
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
|
github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231 // indirect
|
|
github.com/pulumi/esc v0.22.0 // indirect
|
|
github.com/rivo/uniseg v0.4.7 // indirect
|
|
github.com/rogpeppe/go-internal v1.14.1 // indirect
|
|
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 // indirect
|
|
github.com/sergi/go-diff v1.4.0 // indirect
|
|
github.com/skeema/knownhosts v1.3.1 // indirect
|
|
github.com/spf13/cast v1.5.0 // indirect
|
|
github.com/spf13/cobra v1.10.2 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/stretchr/testify v1.11.1 // indirect
|
|
github.com/texttheater/golang-levenshtein v1.0.1 // indirect
|
|
github.com/uber/jaeger-client-go v2.30.0+incompatible // indirect
|
|
github.com/uber/jaeger-lib v2.4.1+incompatible // indirect
|
|
github.com/xanzy/ssh-agent v0.3.3 // indirect
|
|
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
|
|
github.com/zclconf/go-cty v1.17.0 // indirect
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
golang.org/x/crypto v0.48.0 // indirect
|
|
golang.org/x/exp v0.0.0-20250718183923-645b1fa84792 // indirect
|
|
golang.org/x/mod v0.32.0 // indirect
|
|
golang.org/x/net v0.50.0 // indirect
|
|
golang.org/x/sync v0.19.0 // indirect
|
|
golang.org/x/sys v0.41.0 // indirect
|
|
golang.org/x/term v0.40.0 // indirect
|
|
golang.org/x/text v0.34.0 // indirect
|
|
golang.org/x/tools v0.41.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d // indirect
|
|
google.golang.org/grpc v1.79.1 // indirect
|
|
google.golang.org/protobuf v1.36.11 // indirect
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
lukechampine.com/frand v1.5.1 // indirect
|
|
pgregory.net/rapid v1.2.0 // indirect
|
|
)
|