Update module github.com/open-policy-agent/conftest to v0.71.1

[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/open-policy-agent/conftest	v0.37.0 → v0.71.1

---

Release Notes

open-policy-agent/conftest (github.com/open-policy-agent/conftest)

v0.71.1

Compare Source

Changelog

OPA Changes

• 00e9bc6: build(deps): bump github.com/open-policy-agent/opa from 1.21.0 to 1.21.1 (#​1439) (@​dependabot[bot])

Other Changes

• 8f7ac01: build(deps): bump github.com/moby/buildkit from 0.33.0 to 0.33.1 (#​1440) (@​dependabot[bot])

v0.71.0

Compare Source

Changelog

New Features

• 636cfe3: feat: Add parser for CODEOWNER files (#​1404) (@​apnsngr)

Bug Fixes

• 96fc461: fix(docs): unbreak Netlify build on the Noble image (#​1433) (@​boranx)
• 8345c40: fix: emit a single TAP plan across all files (#​1435) (@​behappymia)

OPA Changes

• b254dd7: build(deps): bump github.com/open-policy-agent/opa from 1.20.2 to 1.21.0 (#​1434) (@​dependabot[bot])

Other Changes

• a766df6: build(deps): bump alpine from 3.24.1 to 3.24.2 (#​1430) (@​dependabot[bot])
• b4bcb74: build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 (#​1432) (@​dependabot[bot])
• 6febea0: build(deps): bump github.com/magiconair/properties (#​1431) (@​dependabot[bot])
• e0275ea: chore: run goreleaser in parallel with docker builds (#​1427) (@​jalseth)
• 722d53f: ci: Add SPDX formatted SBOM to the release workflow (#​1428) (@​jalseth)
• f1484a6: refactor(outputter): Standardize how totals are accumulated (#​1429) (@​jalseth)

v0.70.1

Compare Source

Changelog

New Features

• 0b42cb5: feat: Sign build artifacts (#​1424) (@​jalseth)

Bug Fixes

• f01cab0: fix: share inter-query cache across all queries in an Engine (#​1423) (@​jalseth)

Documentation Updates

• 634260c: docs: clarify private OCI registry URLs (#​1395) (@​Battleplus)

v0.70.0

Compare Source

Changelog

New Features

• bbee10c: feat(parser): add Groovy and Jenkinsfile support (#​1387) (@​salman-frs)
• 314b873: feat: add --github-hide-passed to skip passing files in GitHub output (#​1355) (@​somaz94)
• c149d81: feat: name stdin input in test output (#​1386) (@​rylena)

Bug Fixes

• 64da8a2: fix(output): escape ':' and ',' in GitHub workflow command file names (#​1399) (@​VXNCXNX)
• fa119bc: fix(sarif): percent-encode artifact paths (#​1419) (@​Hanabi9248)
• 944ef69: fix: accept underscores in textproto message names (#​1421) (@​Hanabi9248)
• 82ba002: fix: allow --update to clone into a pre-existing --policy directory (#​1383) (@​pujitha24)
• 49f36aa: fix: apply ignore regex to explicit files (#​1413) (@​SetraTheXX)
• c30bc1a: fix: make test policy updates repeatable (#​1379) (@​Eljees)
• de66600: fix: preserve non-finite INI values as strings (#​1420) (@​Hanabi9248)
• 3a575a7: fix: propagate plugin exit code to conftest process (#​1345) (@​arpitjain099)
• 2f28498: fix: return CycloneDX parser errors (#​1335) (@​immanuwell)

OPA Changes

• 1b97ec7: build(deps): bump github.com/open-policy-agent/opa from 1.19.0 to 1.20.2 (#​1418) (@​dependabot[bot])

Other Changes

• b0d6b6a: build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#​1389) (@​dependabot[bot])
• ba00b80: build(deps): bump actions/setup-go from 6.3.0 to 7.0.0 (#​1375) (@​dependabot[bot])
• 1860682: build(deps): bump actions/setup-python from 6.1.0 to 7.0.0 (#​1376) (@​dependabot[bot])
• e2ee7c0: build(deps): bump cachix/install-nix-action from 31.10.6 to 31.11.1 (#​1402) (@​dependabot[bot])
• 5eb803b: build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#​1381) (@​dependabot[bot])
• 6b36133: build(deps): bump docker/login-action from 4.4.0 to 4.6.0 (#​1390) (@​dependabot[bot])
• b476e49: build(deps): bump github.com/CycloneDX/cyclonedx-go (#​1412) (@​dependabot[bot])
• 6f3b7dc: build(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8 (#​1401) (@​dependabot[bot])
• da2b32a: build(deps): bump github.com/hashicorp/go-getter from 1.8.8 to 1.8.9 (#​1416) (@​dependabot[bot])
• 74d8677: build(deps): bump github.com/magiconair/properties (#​1378) (@​dependabot[bot])
• 6a3fd60: build(deps): bump github.com/moby/buildkit from 0.30.0 to 0.32.2 (#​1392) (@​dependabot[bot])
• 6274003: build(deps): bump github.com/moby/buildkit from 0.32.2 to 0.33.0 (#​1415) (@​dependabot[bot])
• 85485c0: build(deps): bump golang from 1.26.5-alpine to 1.26.6-alpine (#​1400) (@​dependabot[bot])
• c0ac6cd: build(deps): bump golang from 1.26.6-alpine to 1.27.1-alpine (#​1417) (@​dependabot[bot])
• c93d486: build(deps): bump js-yaml from 4.2.0 to 4.3.0 in /examples/ts (#​1377) (@​dependabot[bot])
• 9c54228: build(deps): bump js-yaml from 4.3.0 to 4.3.1 in /examples/ts (#​1391) (@​dependabot[bot])
• 04eb67e: chore: Update flake.lock (#​1407) (@​jalseth)
• 87f727c: chore: disable goconst in Go test files (#​1406) (@​jalseth)
• fc7d7d7: refactor(parser): Add Remarshal() helper (#​1411) (@​jalseth)

v0.69.0

Compare Source

Changelog

New Features

• 55d9a7b: feat(verify): Add --var-values flag (#​1288) (@​jalseth)
• 81f1ce4: feat: support glob wildcards in --namespace (#​1343) (@​arpitjain099)

Bug Fixes

• cd348b8: fix(ci): update setup-regal action to open-policy-agent org (#​1368) (@​boranx)
• 0e38a95: fix(verify): default --show-builtin-errors to false (#​1325) (@​dgeorgievski)

OPA Changes

• c0aceef: build(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.17.1 (#​1346) (@​dependabot[bot])
• a41c3a9: build(deps): bump github.com/open-policy-agent/opa from 1.17.1 to 1.18.2 (#​1363) (@​dependabot[bot])
• 4130398: build(deps): bump github.com/open-policy-agent/opa to v1.19.0 (#​1385) (@​johanfylling)

Other Changes

• 6b381ad: Pre commit conftest docs integration (#​1263) (@​jrottenberg)
• 107ec8e: build(deps): bump actions/checkout from 6.0.1 to 6.0.3 (#​1352) (@​dependabot[bot])
• 0b9a9be: build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#​1358) (@​dependabot[bot])
• a2ddb01: build(deps): bump alpine from 3.23.3 to 3.23.4 (#​1316) (@​dependabot[bot])
• cbe17f2: build(deps): bump alpine from 3.23.4 to 3.24.0 (#​1351) (@​dependabot[bot])
• 15ddb9d: build(deps): bump alpine from 3.24.0 to 3.24.1 (#​1357) (@​dependabot[bot])
• 313bf0a: build(deps): bump cachix/install-nix-action from 31.10.1 to 31.10.6 (#​1329) (@​dependabot[bot])
• cab3aa1: build(deps): bump cuelang.org/go from 0.16.0 to 0.16.1 (#​1310) (@​dependabot[bot])
• bee01de: build(deps): bump cuelang.org/go from 0.16.1 to 0.17.0 (#​1362) (@​dependabot[bot])
• 7797f79: build(deps): bump cuelang.org/go from 0.17.0 to 0.17.1 (#​1373) (@​dependabot[bot])
• 8cd5347: build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 (#​1314) (@​dependabot[bot])
• 92db984: build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 (#​1337) (@​dependabot[bot])
• 55eeab0: build(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#​1309) (@​dependabot[bot])
• 8d864f0: build(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#​1339) (@​dependabot[bot])
• 9f57449: build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#​1370) (@​dependabot[bot])
• 026dc0d: build(deps): bump github.com/CycloneDX/cyclonedx-go (#​1333) (@​dependabot[bot])
• 8293d77: build(deps): bump github.com/moby/buildkit from 0.29.0 to 0.30.0 (#​1331) (@​dependabot[bot])
• 2f126ef: build(deps): bump golang from 1.26.1-alpine to 1.26.2-alpine (#​1312) (@​dependabot[bot])
• 1f45387: build(deps): bump golang from 1.26.2-alpine to 1.26.4-alpine (#​1344) (@​dependabot[bot])
• fb6fbdd: build(deps): bump golang from 1.26.4-alpine to 1.26.5-alpine (#​1371) (@​dependabot[bot])
• 30ed475: build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#​1364) (@​dependabot[bot])
• d099ca1: build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.2 (#​1334) (@​dependabot[bot])
• eb7ca3e: build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#​1366) (@​dependabot[bot])
• d07ab51: build(deps): bump js-yaml from 3.13.1 to 4.2.0 in /examples/ts (#​1353) (@​dependabot[bot])
• 8314227: build(deps): bump sethvargo/ratchet from 0.11.4 to 0.12.0 (#​1374) (@​dependabot[bot])
• 9abd9c4: ci: Use only-new-issues to prevent existing lint violations from blocking CI (#​1340) (@​boranx)
• 169a2e4: perf(engine): Move Input AST conversion to occur before rule loop (#​1348) (@​brittandeyoung)

v0.68.2

Compare Source

Changelog

OPA Changes

• 36f23bf: build(deps): bump github.com/open-policy-agent/opa from 1.15.1 to 1.15.2 (#​1311) (@​dependabot[bot])

Other Changes

• 479de13: build(deps): bump github.com/hashicorp/go-getter from 1.8.5 to 1.8.6 (#​1307) (@​dependabot[bot])

v0.68.1

Compare Source

Changelog

Bug Fixes

• 2631477: fix(push): Use Rego v1 by default (#​1290) (@​jalseth)

v0.68.0

Compare Source

Changelog

New Features

• a604f55: feat(parser): Add nginx parser (#​1289) (@​jalseth)

Bug Fixes

• 487a2e1: fix: Skip extensionless files that are not recognized types (#​1302) (@​ricardbejarano)

OPA Changes

• 472e4e3: build(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.15.1 (#​1303) (@​dependabot[bot])

Other Changes

• 6d521ef: build(deps): bump github.com/google/go-jsonnet from 0.21.0 to 0.22.0 (#​1299) (@​dependabot[bot])
• 2d5f1c2: build(deps): bump github.com/moby/buildkit from 0.28.0 to 0.29.0 (#​1306) (@​dependabot[bot])

v0.67.1

Compare Source

Changelog

Bug Fixes

• 9cef5a2: fix(releasing): Ensure GoReleaser creates a tar for linux_amd64 (#​1294) (@​jalseth)

Other Changes

• 8bc9477: build(deps): bump actions/setup-go from 6.0.0 to 6.3.0 (#​1278) (@​dependabot[bot])
• 7655171: build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#​1284) (@​dependabot[bot])
• 35ab0ca: build(deps): bump docker/login-action from 3.6.0 to 4.0.0 (#​1283) (@​dependabot[bot])
• 94e5286: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#​1275) (@​dependabot[bot])
• 45a3835: ci: Update Nix devshell to use go-overlay (#​1287) (@​jalseth)

v0.67.0

Compare Source

Changelog

Bug Fixes

• 69f41ed: fix(plugin): Handle spaces in the plugin command path (#​1242) (@​jalseth)

OPA Changes

• 59cb419: build(deps): bump github.com/open-policy-agent/opa from 1.12.1 to 1.13.1 (#​1262) (@​dependabot[bot])
• 507345f: build(deps): bump github.com/open-policy-agent/opa from 1.13.1 to 1.13.2 (#​1274) (@​dependabot[bot])
• 69b7329: build(deps): bump github.com/open-policy-agent/opa from 1.13.2 to 1.14.1 (#​1282) (@​dependabot[bot])

Other Changes

• 8ec8ba0: build(deps): bump actions/checkout from 5.0.0 to 6.0.1 (#​1230) (@​dependabot[bot])
• fb1d20e: build(deps): bump alpine from 3.23.2 to 3.23.3 (#​1264) (@​dependabot[bot])
• 84ee4f1: build(deps): bump bats-core/bats-action from 3.0.1 to 4.0.0 (#​1270) (@​dependabot[bot])
• 06f26a6: build(deps): bump cuelang.org/go from 0.15.1 to 0.15.3 (#​1244) (@​dependabot[bot])
• d01f783: build(deps): bump cuelang.org/go from 0.15.3 to 0.15.4 (#​1259) (@​dependabot[bot])
• b7f9627: build(deps): bump cuelang.org/go from 0.15.4 to 0.16.0 (#​1279) (@​dependabot[bot])
• 3e4cf98: build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#​1273) (@​dependabot[bot])
• b7060d3: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0 (#​1265) (@​dependabot[bot])
• e130513: build(deps): bump github.com/hashicorp/go-getter from 1.8.3 to 1.8.4 (#​1245) (@​dependabot[bot])
• e5afd3f: build(deps): bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.5 (#​1285) (@​dependabot[bot])
• d6f5fb2: build(deps): bump github.com/moby/buildkit from 0.26.3 to 0.27.1 (#​1260) (@​dependabot[bot])
• c1ba806: build(deps): bump github.com/moby/buildkit from 0.27.1 to 0.28.0 (#​1280) (@​dependabot[bot])
• fc57996: build(deps): bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 (#​1243) (@​dependabot[bot])
• 95d756f: build(deps): bump github.com/spdx/tools-golang from 0.5.6 to 0.5.7 (#​1251) (@​dependabot[bot])
• a59b8bd: build(deps): bump golang from 1.25.5-alpine to 1.25.6-alpine (#​1256) (@​dependabot[bot])
• bde1457: build(deps): bump golang from 1.25.6-alpine to 1.26.1-alpine (#​1281) (@​dependabot[bot])
• b2e58f0: build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 (#​1231) (@​dependabot[bot])
• b1e9f30: ci: Update Dependabot config (#​1267) (@​jalseth)
• bf63002: ci: Update setup-go to use Go version from go.mod (#​1268) (@​jalseth)

v0.66.0

Compare Source

Changelog

OPA Changes

• 08529c7: build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.12.1 (#​1240) (@​dependabot[bot])

Other Changes

• 10434c1: build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#​1225) (@​dependabot[bot])
• 25bee5d: build(deps): bump alpine from 3.22.2 to 3.23.0 (#​1229) (@​dependabot[bot])
• 6cafc0f: build(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 (#​1238) (@​dependabot[bot])
• f6b8fa9: build(deps): bump github.com/moby/buildkit from 0.26.2 to 0.26.3 (#​1235) (@​dependabot[bot])
• 233776f: build(deps): bump golang from 1.25.4-alpine to 1.25.5-alpine (#​1228) (@​dependabot[bot])
• 7a86f94: chore: Remove dependency on github.com/pkg/errors (#​1233) (@​jalseth)
• 5a394b8: ci(golangci-lint): Disable revive skip-package-name-collision-with-go-std (#​1232) (@​jalseth)

v0.65.0

Compare Source

Changelog

New Features

• 7de1f99: feat: Add location to SARIF output (#​1207) (@​jalseth)

Bug Fixes

• 94bb769: fix(build): Include Git version when using 'make build' (#​1218) (@​jalseth)
• ff4e456: fix(sarif): Include conftest version number (#​1206) (@​jalseth)

OPA Changes

• 8c4cfa6: build(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.11.0 (#​1224) (@​dependabot[bot])

Other Changes

• 3dab980: build(deps): bump cuelang.org/go from 0.15.0 to 0.15.1 (#​1217) (@​dependabot[bot])
• cfa85ca: build(deps): bump github.com/moby/buildkit from 0.25.2 to 0.26.2 (#​1216) (@​dependabot[bot])
• dd7e3bc: build(deps): bump golang from 1.25.3-alpine to 1.25.4-alpine (#​1210) (@​dependabot[bot])
• bbbb04c: chore: Include goreleaser in Nix devshell (#​1219) (@​jalseth)
• ac3146f: ci: Pin GitHub Actions to the Git SHA using ratchet (#​1204) (@​jalseth)

v0.64.0

Compare Source

Changelog

New Features

• 00b02b2: feat: Include location in the result output (#​1196) (@​jalseth)
• ee91078: feat: Refactor GitHub outputter to support locations from Rego policy (#​1197) (@​jalseth)
• d359466: feat: add conftest-fmt and conftest-pull pre-commit hooks (#​1192) (@​dkolepp)

Bug Fixes

• 997f5ce: fix: Fix XDG writable check on Windows (#​1185) (@​jalseth)
• fb9c88d: fix: Only use XDG directories for plugin if they are writable (#​1182) (@​jalseth)
• 4a2ddd6: fix: Use "python3" instead of "python" in the Makefile (#​1184) (@​jalseth)

OPA Changes

• 347388d: build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#​1201) (@​dependabot[bot])

Other Changes

• 75449c3: build(deps): bump alpine from 3.22.1 to 3.22.2 (#​1191) (@​dependabot[bot])
• 0ade44b: build(deps): bump cuelang.org/go from 0.14.1 to 0.15.0 (#​1202) (@​dependabot[bot])
• 1ef4588: build(deps): bump github.com/hashicorp/go-getter from 1.8.2 to 1.8.3 (#​1199) (@​dependabot[bot])
• d2e56c3: build(deps): bump github.com/moby/buildkit from 0.25.0 to 0.25.2 (#​1200) (@​dependabot[bot])
• 5242185: build(deps): bump golang from 1.25.1-alpine to 1.25.3-alpine (#​1193) (@​dependabot[bot])
• 58ace24: build: Add Nix devshell (#​1186) (@​jalseth)
• 6189512: chore: Fix gitignore for acceptance tests (#​1195) (@​jalseth)
• 7d41238: ci: Run validation job on Linux, macOS, Windows (#​1181) (@​jalseth)

v0.63.0

Compare Source

Changelog

New Features

• 30b9a8d: feat: add reformat command for JSON output conversion (#​1153) (@​thevilledev)

Bug Fixes

• ffb6ce3: fix: Add explicit line-number to GitHub output (#​1173) (@​tun0)

OPA Changes

• 64bf641: build(deps): bump github.com/open-policy-agent/opa from 1.6.0 to 1.7.1 (#​1156) (@​dependabot[bot])
• 981983b: build(deps): bump github.com/open-policy-agent/opa from 1.7.1 to 1.8.0 (#​1165) (@​dependabot[bot])
• c7aa1d4: build(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#​1175) (@​dependabot[bot])

Other Changes

• 0d903ce: build(deps): bump actions/checkout from 4 to 5 (#​1158) (@​dependabot[bot])
• 364cf32: build(deps): bump actions/setup-go from 5 to 6 (#​1171) (@​dependabot[bot])
• d4aa81f: build(deps): bump actions/setup-python from 5 to 6 (#​1172) (@​dependabot[bot])
• a1ecf3f: build(deps): bump alpine from 3.22.0 to 3.22.1 (#​1152) (@​dependabot[bot])
• b87ca5f: build(deps): bump cuelang.org/go from 0.13.2 to 0.14.1 (#​1159) (@​dependabot[bot])
• 1c5abaa: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3 (#​1177) ([@&#

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 40 additional dependencies were updated
• The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
go	1.25.0 -> 1.26.8
github.com/spf13/cobra	v1.6.1 -> v1.10.2
github.com/stretchr/testify	v1.11.1 -> v1.12.1
golang.org/x/oauth2	v0.27.0 -> v0.36.0
cloud.google.com/go	v0.105.0 -> v0.123.0
cloud.google.com/go/compute/metadata	v0.3.0 -> v0.9.0
github.com/BurntSushi/toml	v0.3.1 -> v1.6.0
github.com/CycloneDX/cyclonedx-go	v0.4.0 -> v0.12.0
github.com/KeisukeYamashita/go-vcl	v0.4.0 -> v0.4.0
github.com/Microsoft/go-winio	v0.6.2 -> v0.6.3-0.20251027160822-ad3df93bed29
github.com/ProtonMail/go-crypto	v1.1.6 -> v1.4.1
github.com/agnivade/levenshtein	v1.1.1 -> v1.2.1
github.com/gobwas/glob	v0.2.3 -> v1.0.0
github.com/google/uuid	v1.3.0 -> v1.6.0
github.com/googleapis/enterprise-certificate-proxy	v0.2.0 -> v0.3.20
github.com/googleapis/gax-go/v2	v2.7.0 -> v2.24.0
github.com/hashicorp/go-getter	v1.6.1 -> v1.8.9
github.com/hashicorp/go-version	v1.5.0 -> v1.9.0
github.com/hashicorp/hcl/v2	v2.9.1 -> v2.23.0
github.com/jstemmer/go-junit-report	v0.9.1 -> v1.0.0
github.com/klauspost/compress	v1.15.11 -> v1.20.0
github.com/magiconair/properties	v1.8.5 -> v1.18.12
github.com/mattn/go-runewidth	v0.0.14 -> v0.0.19
github.com/moby/buildkit	v0.9.3 -> v0.33.1
github.com/olekukonko/tablewriter	v0.0.5 -> v1.1.5
github.com/open-policy-agent/opa	v0.47.4 -> v1.21.1
github.com/opencontainers/image-spec	v1.1.0-rc1 -> v1.1.1
github.com/rcrowley/go-metrics	v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
github.com/sirupsen/logrus	v1.9.3 -> v1.10.2
github.com/spdx/tools-golang	v0.2.0 -> v0.5.7
github.com/spf13/pflag	v1.0.5 -> v1.0.10
github.com/yashtewari/glob-intersection	v0.1.0 -> v0.2.0
github.com/zclconf/go-cty	v1.8.1 -> v1.16.2
golang.org/x/crypto	v0.53.0 -> v0.56.0
golang.org/x/net	v0.56.0 -> v0.58.0
golang.org/x/sync	v0.21.0 -> v0.23.0
golang.org/x/sys	v0.46.0 -> v0.48.0
golang.org/x/text	v0.39.0 -> v0.42.0
google.golang.org/api	v0.103.0 -> v0.294.0
google.golang.org/genproto	v0.0.0-20221202195650-67e5cbc046fd -> v0.0.0-20260715232425-e75dac1f907d
sigs.k8s.io/yaml	v1.2.0 -> v1.6.0