From 6055c0c5915b3679f27f54b1edff23fb6cfd07c1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Jan 2026 07:15:04 +0000 Subject: [PATCH] Bump github.com/carabiner-dev/signer in the gomod group Bumps the gomod group with 1 update: [github.com/carabiner-dev/signer](https://github.com/carabiner-dev/signer). Updates `github.com/carabiner-dev/signer` from 0.3.5 to 0.3.6 - [Release notes](https://github.com/carabiner-dev/signer/releases) - [Commits](https://github.com/carabiner-dev/signer/compare/v0.3.5...v0.3.6) --- updated-dependencies: - dependency-name: github.com/carabiner-dev/signer dependency-version: 0.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] --- go.mod | 4 ++-- go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index 16b2dea..aca92ba 100644 --- a/go.mod +++ b/go.mod @@ -5,7 +5,7 @@ go 1.25.5 require ( github.com/carabiner-dev/attestation v0.2.0 github.com/carabiner-dev/collector v0.2.7 - github.com/carabiner-dev/signer v0.3.5 + github.com/carabiner-dev/signer v0.3.6 github.com/carabiner-dev/vcslocator v0.3.3-0.20260110024210-a5602e9845b5 github.com/fatih/color v1.18.0 github.com/go-git/go-billy/v6 v6.0.0-20250627091229-31e2a16eef30 @@ -151,7 +151,7 @@ require ( golang.org/x/oauth2 v0.33.0 // indirect golang.org/x/sync v0.19.0 // indirect golang.org/x/sys v0.40.0 // indirect - golang.org/x/term v0.38.0 // indirect + golang.org/x/term v0.39.0 // indirect golang.org/x/text v0.32.0 // indirect golang.org/x/time v0.14.0 // indirect golang.org/x/tools v0.39.0 // indirect diff --git a/go.sum b/go.sum index dbae4ff..e9369cb 100644 --- a/go.sum +++ b/go.sum @@ -104,8 +104,8 @@ github.com/carabiner-dev/policy v0.4.1-0.20251211203139-302be2dfaf0d h1:nfzLqV09 github.com/carabiner-dev/policy v0.4.1-0.20251211203139-302be2dfaf0d/go.mod h1:ufVsPpVkUZPxsdI8yxokSSd5dqqDhp1nebbVpjLvvqg= github.com/carabiner-dev/predicates v0.1.0 h1:t6tQF9gFdr6TIccWtuNk3kFasx8eu88INFVGkCUnjL4= github.com/carabiner-dev/predicates v0.1.0/go.mod h1:jL6EAD+LiI6GW/rOdRYAJF4HaA88/V2Q4n7yUGNQ7XM= -github.com/carabiner-dev/signer v0.3.5 h1:PUzXLHMoaIc3A4+tlxS/syb4PYwl0UU55viOLGchiDc= -github.com/carabiner-dev/signer v0.3.5/go.mod h1:D3PsTzKupkHmAa7kZ7WqmMkba8KCXDJL6+vuaQjuzt8= +github.com/carabiner-dev/signer v0.3.6 h1:5XaekH256qoUR4k94o1Sqq0O1NU4524lKIKjD5+yjhc= +github.com/carabiner-dev/signer v0.3.6/go.mod h1:XSCERHZozvq3UJM5VaipFPOqs5G6Kp3U+Mxf5Hx5unQ= github.com/carabiner-dev/vcslocator v0.3.3-0.20260110024210-a5602e9845b5 h1:+p6WdncLRAgDGpGy5VWmcy49MTRMCrGsCAZxIth4UmA= github.com/carabiner-dev/vcslocator v0.3.3-0.20260110024210-a5602e9845b5/go.mod h1:B3JFnwypdrRVQPJKNK3BOlRw6DbgmsiHGmoT3ZELpp8= github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8= @@ -571,8 +571,8 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ= golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= -golang.org/x/term v0.38.0 h1:PQ5pkm/rLO6HnxFR7N2lJHOZX6Kez5Y1gDSJla6jo7Q= -golang.org/x/term v0.38.0/go.mod h1:bSEAKrOT1W+VSu9TSCMtoGEOUcKxOKgl3LE5QEF/xVg= +golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY= +golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=