4bdfd3b684
We have tagged version v0.35.0 of golang.org/x/crypto in order to address a security issue. Version v0.35.0 of golang.org/x/crypto fixes a vulnerability in the golang.org/x/crypto/ssh package which could cause a denial of service. SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. Thanks to Yuichi Watanabe for reporting this issue. This is CVE-2025-22869 and Go issue https://go.dev/issue/71931. full diff: https://github.com/golang/crypto/compare/v0.31.0...v0.35.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
106 lines
4.6 KiB
Modula-2
106 lines
4.6 KiB
Modula-2
module github.com/docker/cli
|
|
|
|
// 'vendor.mod' enables use of 'go mod vendor' to managed 'vendor/' directory.
|
|
// There is no 'go.mod' file, as that would imply opting in for all the rules
|
|
// around SemVer, which this repo cannot abide by as it uses CalVer.
|
|
|
|
go 1.23.0
|
|
|
|
require (
|
|
dario.cat/mergo v1.0.1
|
|
github.com/containerd/platforms v1.0.0-rc.1
|
|
github.com/creack/pty v1.1.24
|
|
github.com/distribution/reference v0.6.0
|
|
github.com/docker/cli-docs-tool v0.9.0
|
|
github.com/docker/distribution v2.8.3+incompatible
|
|
github.com/docker/docker v28.0.1+incompatible
|
|
github.com/docker/docker-credential-helpers v0.9.2
|
|
github.com/docker/go-connections v0.5.0
|
|
github.com/docker/go-units v0.5.0
|
|
github.com/fvbommel/sortorder v1.1.0
|
|
github.com/go-jose/go-jose/v4 v4.0.5
|
|
github.com/go-viper/mapstructure/v2 v2.2.1
|
|
github.com/gogo/protobuf v1.3.2
|
|
github.com/google/go-cmp v0.6.0
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
|
|
github.com/google/uuid v1.6.0
|
|
github.com/mattn/go-runewidth v0.0.16
|
|
github.com/moby/patternmatcher v0.6.0
|
|
github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554
|
|
github.com/moby/sys/capability v0.4.0
|
|
github.com/moby/sys/sequential v0.6.0
|
|
github.com/moby/sys/signal v0.7.1
|
|
github.com/moby/term v0.5.2
|
|
github.com/morikuni/aec v1.0.0
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/opencontainers/image-spec v1.1.0
|
|
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/sirupsen/logrus v1.9.3
|
|
github.com/spf13/cobra v1.8.1
|
|
github.com/spf13/pflag v1.0.6
|
|
github.com/theupdateframework/notary v0.7.1-0.20210315103452-bf96a202a09a
|
|
github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346
|
|
github.com/xeipuuv/gojsonschema v1.2.0
|
|
go.opentelemetry.io/otel v1.31.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0
|
|
go.opentelemetry.io/otel/metric v1.31.0
|
|
go.opentelemetry.io/otel/sdk v1.31.0
|
|
go.opentelemetry.io/otel/sdk/metric v1.31.0
|
|
go.opentelemetry.io/otel/trace v1.31.0
|
|
golang.org/x/sync v0.11.0
|
|
golang.org/x/sys v0.30.0
|
|
golang.org/x/term v0.29.0
|
|
golang.org/x/text v0.22.0
|
|
gopkg.in/yaml.v3 v3.0.1
|
|
gotest.tools/v3 v3.5.2
|
|
tags.cncf.io/container-device-interface v0.8.0
|
|
)
|
|
|
|
require (
|
|
github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect
|
|
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
|
|
github.com/Microsoft/go-winio v0.6.2 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/containerd/log v0.1.0 // indirect
|
|
github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c // indirect
|
|
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/go-logr/logr v1.4.2 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/golang/protobuf v1.5.4 // indirect
|
|
github.com/gorilla/mux v1.8.1 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/klauspost/compress v1.17.11 // indirect
|
|
github.com/miekg/pkcs11 v1.1.1 // indirect
|
|
github.com/moby/docker-image-spec v1.3.1 // indirect
|
|
github.com/moby/sys/symlink v0.3.0 // indirect
|
|
github.com/moby/sys/user v0.3.0 // indirect
|
|
github.com/moby/sys/userns v0.1.0 // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/prometheus/client_golang v1.20.5 // indirect
|
|
github.com/prometheus/client_model v0.6.1 // indirect
|
|
github.com/prometheus/common v0.55.0 // indirect
|
|
github.com/prometheus/procfs v0.15.1 // indirect
|
|
github.com/rivo/uniseg v0.2.0 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
go.etcd.io/etcd/raft/v3 v3.5.16 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v1.3.1 // indirect
|
|
golang.org/x/crypto v0.35.0 // indirect
|
|
golang.org/x/net v0.33.0 // indirect
|
|
golang.org/x/time v0.6.0 // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20241021214115-324edc3d5d38 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38 // indirect
|
|
google.golang.org/grpc v1.69.4 // indirect
|
|
google.golang.org/protobuf v1.35.2 // indirect
|
|
)
|