From 355d91de0441c6dda208d9c3ac0d14c7d121f928 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 23 Jul 2024 04:45:25 +0000 Subject: build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0 Bumps [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) from 5.4.1 to 5.5.0. - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](https://github.com/go-git/go-billy/compare/v5.4.1...v5.5.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-billy/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- go.mod | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'go.mod') diff --git a/go.mod b/go.mod index 7d0c7b51..153cb5b1 100644 --- a/go.mod +++ b/go.mod @@ -16,7 +16,7 @@ require ( github.com/cheekybits/genny v1.0.0 github.com/dustin/go-humanize v1.0.1 github.com/fatih/color v1.17.0 - github.com/go-git/go-billy/v5 v5.4.1 + github.com/go-git/go-billy/v5 v5.5.0 github.com/go-git/go-git/v5 v5.8.1 github.com/gorilla/mux v1.8.1 github.com/hashicorp/golang-lru/v2 v2.0.7 @@ -38,7 +38,10 @@ require ( golang.org/x/text v0.16.0 ) -require golang.org/x/telemetry v0.0.0-20240522233618-39ace7a40ae7 // indirect +require ( + github.com/cyphar/filepath-securejoin v0.2.4 // indirect + golang.org/x/telemetry v0.0.0-20240522233618-39ace7a40ae7 // indirect +) require ( dario.cat/mergo v1.0.0 // indirect -- cgit