Update dependencies (#159)

.github/ISSUE_TEMPLATE/bug.yml

@@ -2,66 +2,66 @@ name: 'Bug report'
 description: 'File a bug report'
 labels: ['bug']
 body:
-- type: 'markdown'
-  attributes:
-    value: |-
-      Thank you for filing an bug. Please complete the form below so we can triage, reproduce, and fix your issue.
+  - type: 'markdown'
+    attributes:
+      value: |-
+        Thank you for filing an bug. Please complete the form below so we can triage, reproduce, and fix your issue.
 
-- id: 'tldr'
-  type: 'textarea'
-  attributes:
-    label: 'TL;DR'
-    description: 'Describe the bug in 1-2 sentences.'
-  validations:
-    required: true
+  - id: 'tldr'
+    type: 'textarea'
+    attributes:
+      label: 'TL;DR'
+      description: 'Describe the bug in 1-2 sentences.'
+    validations:
+      required: true
 
-- id: 'expected_behavior'
-  type: 'textarea'
-  attributes:
-    label: 'Expected behavior'
-    description: 'What did you expect to happen?'
+  - id: 'expected_behavior'
+    type: 'textarea'
+    attributes:
+      label: 'Expected behavior'
+      description: 'What did you expect to happen?'
 
-- id: 'observed_behavior'
-  type: 'textarea'
-  attributes:
-    label: 'Observed behavior'
-    description: 'What happened instead?'
+  - id: 'observed_behavior'
+    type: 'textarea'
+    attributes:
+      label: 'Observed behavior'
+      description: 'What happened instead?'
 
-- id: 'log_output'
-  type: 'textarea'
-  attributes:
-    label: 'Debug log output'
-    description: 'Paste the debug log output here. See https://github.com/GoogleCloudPlatform/gcr-cleaner#Debugging for more information.'
-    render: 'text'
-    
-- id: 'mode'
-  type: 'dropdown'
-  attributes:
-    label: 'How are you running gcr-cleaner?'
-    options:
-      - 'CLI'
-      - 'Server'
-  validations:
-    required: true
+  - id: 'log_output'
+    type: 'textarea'
+    attributes:
+      label: 'Debug log output'
+      description: 'Paste the debug log output here. See https://github.com/GoogleCloudPlatform/gcr-cleaner#Debugging for more information.'
+      render: 'text'
+  - id: 'mode'
+    type: 'dropdown'
+    attributes:
+      label: 'How are you running gcr-cleaner?'
+      options:
+        - 'CLI'
+        - 'Server'
+    validations:
+      required: true
+  - id: 'version'
 
-- id: 'version'
-  type: 'input'
-  attributes:
-    label: 'gcr-cleaner version'
-    description: 'Version of gcr-cleaner. If using the CLI, run `gcr-cleaner -v`. If using the server, check the debug logs or provide the container SHA'
-  validations:
-    required: true
+    type: 'input'
+    attributes:
+      label: 'gcr-cleaner version'
+      description: 'Version of gcr-cleaner. If using the CLI, run `gcr-cleaner -v`. If using the server, check the debug logs or provide the container SHA'
+    validations:
+      required: true
+  - id: 'environment'
 
-- id: 'environment'
-  type: 'textarea'
-  attributes:
-    label: 'Environment'
-    description: 'Provide as much information about your environment as possible. If you are using gcr-cleaner as a CLI, include local operating system information. If you are running gcr-cleaner as a service, describe the deployment topology, permissions, and runtime.'
-  validations:
-    required: true
+    type: 'textarea'
+    attributes:
+      label: 'Environment'
+      description: 'Provide as much information about your environment as possible. If you are using gcr-cleaner as a CLI, include local operating system information. If you are running gcr-cleaner as a service, describe the deployment topology, permissions, and runtime.'
+    validations:
+      required: true
+  - id: 'additional'
 
-- id: 'additional'
-  type: 'textarea'
-  attributes:
-    label: 'Additional information'
+    type: 'textarea'
+    attributes:
+      label: 'Additional information'
+      description: 'Is there anything else you think we should know?'
     description: 'Is there anything else you think we should know?'

.github/workflows/release.yml

@@ -13,41 +13,41 @@ jobs:
   release:
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'docker/setup-qemu-action@v2'
+      - uses: 'docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3' # ratchet:docker/setup-qemu-action@v3
 
-      - uses: 'actions/checkout@v3'
+      - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - uses: 'actions/setup-go@v3'
+      - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
         with:
-          go-version: '1.19'
+          go-version-file: 'go.mod'
 
-      - uses: 'docker/login-action@v2'
+      - uses: 'docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d' # ratchet:docker/login-action@v3
         with:
           registry: 'asia-docker.pkg.dev'
           username: '_json_key'
           password: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
-      - uses: 'docker/login-action@v2'
+      - uses: 'docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d' # ratchet:docker/login-action@v3
         with:
           registry: 'europe-docker.pkg.dev'
           username: '_json_key'
           password: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
-      - uses: 'docker/login-action@v2'
+      - uses: 'docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d' # ratchet:docker/login-action@v3
         with:
           registry: 'us-docker.pkg.dev'
           username: '_json_key'
           password: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
       - id: 'import_gpg'
-        uses: 'crazy-max/ghaction-import-gpg@v5'
+        uses: 'crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4' # ratchet:crazy-max/ghaction-import-gpg@v6
         with:
           gpg_private_key: '${{ secrets.GPG_PRIVATE_KEY }}'
           passphrase: '${{ secrets.GPG_PASSPHRASE }}'
 
-      - uses: 'goreleaser/goreleaser-action@v3'
+      - uses: 'goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8' # ratchet:goreleaser/goreleaser-action@v5
         with:
           version: 'latest'
           args: 'release --rm-dist'

.github/workflows/test.yml

@@ -18,12 +18,10 @@ jobs:
     runs-on: 'ubuntu-latest'
 
     steps:
-    - uses: 'actions/checkout@v3'
+      - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
 
-    - uses: 'actions/setup-go@v3'
-      with:
-        go-version: '1.19'
+      - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
 
-    - run: 'go mod download'
-
-    - run: 'make test'
+      - run: 'make test'

go.mod

@@ -1,29 +1,32 @@
 module github.com/GoogleCloudPlatform/gcr-cleaner
 
-go 1.19
+go 1.22
+
+toolchain go1.22.1
 
 require (
-	github.com/google/go-containerregistry v0.14.0
-	golang.org/x/sync v0.1.0
+	github.com/google/go-containerregistry v0.19.0
+	golang.org/x/sync v0.6.0
 )
 
 require (
-	cloud.google.com/go/compute v1.18.0 // indirect
+	cloud.google.com/go/compute v1.25.0 // indirect
 	cloud.google.com/go/compute/metadata v0.2.3 // indirect
-	github.com/docker/cli v23.0.6+incompatible // indirect
-	github.com/docker/distribution v2.8.2+incompatible // indirect
-	github.com/docker/docker v23.0.6+incompatible // indirect
-	github.com/docker/docker-credential-helpers v0.7.0 // indirect
-	github.com/golang/protobuf v1.5.3 // indirect
-	github.com/klauspost/compress v1.16.3 // indirect
+	github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
+	github.com/docker/cli v25.0.3+incompatible // indirect
+	github.com/docker/distribution v2.8.3+incompatible // indirect
+	github.com/docker/docker v25.0.3+incompatible // indirect
+	github.com/docker/docker-credential-helpers v0.8.1 // indirect
+	github.com/golang/protobuf v1.5.4 // indirect
+	github.com/klauspost/compress v1.17.7 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.1.0-rc2 // indirect
+	github.com/opencontainers/image-spec v1.1.0 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/sirupsen/logrus v1.9.0 // indirect
-	golang.org/x/net v0.17.0 // indirect
-	golang.org/x/oauth2 v0.6.0 // indirect
-	golang.org/x/sys v0.13.0 // indirect
-	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/protobuf v1.30.0 // indirect
+	github.com/sirupsen/logrus v1.9.3 // indirect
+	github.com/vbatts/tar-split v0.11.5 // indirect
+	golang.org/x/oauth2 v0.18.0 // indirect
+	golang.org/x/sys v0.18.0 // indirect
+	google.golang.org/appengine v1.6.8 // indirect
+	google.golang.org/protobuf v1.33.0 // indirect
 )