Update dependencies (#159)

.github/ISSUE_TEMPLATE/bug.yml

@@ -2,66 +2,66 @@ name: 'Bug report'
 description: 'File a bug report'
 labels: ['bug']
 body:
-- type: 'markdown'
- attributes:
- value: |-
- Thank you for filing an bug. Please complete the form below so we can triage, reproduce, and fix your issue.
+ - type: 'markdown'
+  attributes:
+  value: |-
+  Thank you for filing an bug. Please complete the form below so we can triage, reproduce, and fix your issue.
 
-- id: 'tldr'
- type: 'textarea'
- attributes:
- label: 'TL;DR'
- description: 'Describe the bug in 1-2 sentences.'
- validations:
- required: true
+ - id: 'tldr'
+  type: 'textarea'
+  attributes:
+  label: 'TL;DR'
+  description: 'Describe the bug in 1-2 sentences.'
+  validations:
+  required: true
 
-- id: 'expected_behavior'
- type: 'textarea'
- attributes:
- label: 'Expected behavior'
- description: 'What did you expect to happen?'
+ - id: 'expected_behavior'
+  type: 'textarea'
+  attributes:
+  label: 'Expected behavior'
+  description: 'What did you expect to happen?'
 
-- id: 'observed_behavior'
- type: 'textarea'
- attributes:
- label: 'Observed behavior'
- description: 'What happened instead?'
+ - id: 'observed_behavior'
+  type: 'textarea'
+  attributes:
+  label: 'Observed behavior'
+  description: 'What happened instead?'
 
-- id: 'log_output'
- type: 'textarea'
- attributes:
- label: 'Debug log output'
- description: 'Paste the debug log output here. See https://github.com/GoogleCloudPlatform/gcr-cleaner#Debugging for more information.'
- render: 'text'
-  
-- id: 'mode'
- type: 'dropdown'
- attributes:
- label: 'How are you running gcr-cleaner?'
- options:
- - 'CLI'
-  - 'Server'
- validations:
-  required: true
+ - id: 'log_output'
+  type: 'textarea'
+  attributes:
+  label: 'Debug log output'
+  description: 'Paste the debug log output here. See https://github.com/GoogleCloudPlatform/gcr-cleaner#Debugging for more information.'
+  render: 'text'
+ - id: 'mode'
+ type: 'dropdown'
+  attributes:
+  label: 'How are you running gcr-cleaner?'
+  options:
+  - 'CLI'
+  - 'Server'
+ validations:
+  required: true
+ - id: 'version'
 
-- id: 'version'
- type: 'input'
- attributes:
- label: 'gcr-cleaner version'
- description: 'Version of gcr-cleaner. If using the CLI, run `gcr-cleaner -v`. If using the server, check the debug logs or provide the container SHA'
- validations:
-  required: true
+ type: 'input'
+  attributes:
+  label: 'gcr-cleaner version'
+  description: 'Version of gcr-cleaner. If using the CLI, run `gcr-cleaner -v`. If using the server, check the debug logs or provide the container SHA'
+ validations:
+  required: true
+ - id: 'environment'
 
-- id: 'environment'
- type: 'textarea'
- attributes:
- label: 'Environment'
- description: 'Provide as much information about your environment as possible. If you are using gcr-cleaner as a CLI, include local operating system information. If you are running gcr-cleaner as a service, describe the deployment topology, permissions, and runtime.'
- validations:
-  required: true
+ type: 'textarea'
+  attributes:
+  label: 'Environment'
+  description: 'Provide as much information about your environment as possible. If you are using gcr-cleaner as a CLI, include local operating system information. If you are running gcr-cleaner as a service, describe the deployment topology, permissions, and runtime.'
+ validations:
+  required: true
+ - id: 'additional'
 
-- id: 'additional'
- type: 'textarea'
- attributes:
- label: 'Additional information'
+ type: 'textarea'
+  attributes:
+  label: 'Additional information'
+  description: 'Is there anything else you think we should know?'
  description: 'Is there anything else you think we should know?'

.github/workflows/release.yml

@@ -13,41 +13,41 @@ jobs:
  release:
  runs-on: 'ubuntu-latest'
  steps:
- - uses: 'docker/setup-qemu-action@v2'
+ - uses: 'docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3' # ratchet:docker/setup-qemu-action@v3
 
- - uses: 'actions/checkout@v3'
+ - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
  with:
  fetch-depth: 0
 
- - uses: 'actions/setup-go@v3'
+ - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
  with:
- go-version: '1.19'
+ go-version-file: 'go.mod'
 
- - uses: 'docker/login-action@v2'
+ - uses: 'docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d' # ratchet:docker/login-action@v3
  with:
  registry: 'asia-docker.pkg.dev'
  username: '_json_key'
  password: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
- - uses: 'docker/login-action@v2'
+ - uses: 'docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d' # ratchet:docker/login-action@v3
  with:
  registry: 'europe-docker.pkg.dev'
  username: '_json_key'
  password: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
- - uses: 'docker/login-action@v2'
+ - uses: 'docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d' # ratchet:docker/login-action@v3
  with:
  registry: 'us-docker.pkg.dev'
  username: '_json_key'
  password: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
  - id: 'import_gpg'
- uses: 'crazy-max/ghaction-import-gpg@v5'
+ uses: 'crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4' # ratchet:crazy-max/ghaction-import-gpg@v6
  with:
  gpg_private_key: '${{ secrets.GPG_PRIVATE_KEY }}'
  passphrase: '${{ secrets.GPG_PASSPHRASE }}'
 
- - uses: 'goreleaser/goreleaser-action@v3'
+ - uses: 'goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8' # ratchet:goreleaser/goreleaser-action@v5
  with:
  version: 'latest'
  args: 'release --rm-dist'

.github/workflows/test.yml

@@ -18,12 +18,10 @@ jobs:
  runs-on: 'ubuntu-latest'
 
  steps:
- - uses: 'actions/checkout@v3'
+  - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
 
- - uses: 'actions/setup-go@v3'
- with:
- go-version: '1.19'
+  - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
+  with:
+  go-version-file: 'go.mod'
 
- - run: 'go mod download'
-
- - run: 'make test'
+ - run: 'make test'

go.mod

@@ -1,29 +1,32 @@
 module github.com/GoogleCloudPlatform/gcr-cleaner
 
-go 1.19
+go 1.22
+
+toolchain go1.22.1
 
 require (
- github.com/google/go-containerregistry v0.14.0
- golang.org/x/sync v0.1.0
+ github.com/google/go-containerregistry v0.19.0
+ golang.org/x/sync v0.6.0
 )
 
 require (
- cloud.google.com/go/compute v1.18.0 // indirect
+ cloud.google.com/go/compute v1.25.0 // indirect
  cloud.google.com/go/compute/metadata v0.2.3 // indirect
- github.com/docker/cli v23.0.6+incompatible // indirect
- github.com/docker/distribution v2.8.2+incompatible // indirect
- github.com/docker/docker v23.0.6+incompatible // indirect
- github.com/docker/docker-credential-helpers v0.7.0 // indirect
- github.com/golang/protobuf v1.5.3 // indirect
- github.com/klauspost/compress v1.16.3 // indirect
+ github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
+ github.com/docker/cli v25.0.3+incompatible // indirect
+ github.com/docker/distribution v2.8.3+incompatible // indirect
+ github.com/docker/docker v25.0.3+incompatible // indirect
+ github.com/docker/docker-credential-helpers v0.8.1 // indirect
+ github.com/golang/protobuf v1.5.4 // indirect
+ github.com/klauspost/compress v1.17.7 // indirect
  github.com/mitchellh/go-homedir v1.1.0 // indirect
  github.com/opencontainers/go-digest v1.0.0 // indirect
- github.com/opencontainers/image-spec v1.1.0-rc2 // indirect
+ github.com/opencontainers/image-spec v1.1.0 // indirect
  github.com/pkg/errors v0.9.1 // indirect
- github.com/sirupsen/logrus v1.9.0 // indirect
- golang.org/x/net v0.17.0 // indirect
- golang.org/x/oauth2 v0.6.0 // indirect
- golang.org/x/sys v0.13.0 // indirect
- google.golang.org/appengine v1.6.7 // indirect
- google.golang.org/protobuf v1.30.0 // indirect
+ github.com/sirupsen/logrus v1.9.3 // indirect
+ github.com/vbatts/tar-split v0.11.5 // indirect
+ golang.org/x/oauth2 v0.18.0 // indirect
+ golang.org/x/sys v0.18.0 // indirect
+ google.golang.org/appengine v1.6.8 // indirect
+ google.golang.org/protobuf v1.33.0 // indirect
 )