Skip to content

Commit 1917f1d

Browse files
committed
fix(deps): bump k8schain to drop transitive docker/docker dependency
Bump google/go-containerregistry/pkg/authn/k8schain to the commit that migrated from github.com/docker/docker to github.com/moby/moby modules. This removes the transitive dependency on github.com/docker/docker, addressing CVE-2026-34040. Signed-off-by: lsviben <sviben.lovro@gmail.com>
1 parent bee99c6 commit 1917f1d

2 files changed

Lines changed: 6 additions & 6 deletions

File tree

go.mod

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,8 @@ require (
1010
github.com/evanphx/json-patch v5.9.11+incompatible
1111
github.com/go-logr/logr v1.4.3
1212
github.com/google/go-cmp v0.7.0
13-
github.com/google/go-containerregistry v0.20.7
14-
github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20230919002926-dbcd01c402b2
13+
github.com/google/go-containerregistry v0.21.2
14+
github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20260312205200-e9163014982e
1515
github.com/in-toto/attestation v1.1.2
1616
github.com/in-toto/in-toto-golang v0.11.0
1717
github.com/prometheus/client_golang v1.23.2

go.sum

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -285,10 +285,10 @@ github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
285285
github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
286286
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
287287
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
288-
github.com/google/go-containerregistry v0.20.7 h1:24VGNpS0IwrOZ2ms2P1QE3Xa5X9p4phx0aUgzYzHW6I=
289-
github.com/google/go-containerregistry v0.20.7/go.mod h1:Lx5LCZQjLH1QBaMPeGwsME9biPeo1lPx6lbGj/UmzgM=
290-
github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20230919002926-dbcd01c402b2 h1:ChuUQ1y5Vf+Eev+UgEed/ljibTIcWY7mYPtWYLK7fxU=
291-
github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20230919002926-dbcd01c402b2/go.mod h1:Ek+8PQrShkA7aHEj3/zSW33wU0V/Bx3zW/gFh7l21xY=
288+
github.com/google/go-containerregistry v0.21.2 h1:vYaMU4nU55JJGFC9JR/s8NZcTjbE9DBBbvusTW9NeS0=
289+
github.com/google/go-containerregistry v0.21.2/go.mod h1:ctO5aCaewH4AK1AumSF5DPW+0+R+d2FmylMJdp5G7p0=
290+
github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20260312205200-e9163014982e h1:/ouF9a6+BFnovNKxnj/HYCyx2eldNzYu2lZvKdez3rM=
291+
github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20260312205200-e9163014982e/go.mod h1:42tJN6TfytRCQlKQiJ2KzfRp5raI2RjN0cjJCFkeSyc=
292292
github.com/google/go-containerregistry/pkg/authn/kubernetes v0.0.0-20250225234217-098045d5e61f h1:GJRzEBoJv/A/E7JbTekq1Q0jFtAfY7TIxUFAK89Mmic=
293293
github.com/google/go-containerregistry/pkg/authn/kubernetes v0.0.0-20250225234217-098045d5e61f/go.mod h1:ZT74/OE6eosKneM9/LQItNxIMBV6CI5S46EXAnvkTBI=
294294
github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=

0 commit comments

Comments
 (0)