Skip to content

Update every dependency to its latest release #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
alexandre-daubois merged 1 commit into from
Nov 9, 2026
Merged

Update every dependency to its latest release #49

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/actions.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ workflows:
- 'actions/attest-build-provenance@v4.2.2'
- 'actions/checkout@v7.0.1'
- 'docker/build-push-action@v7.4.0'
- 'docker/login-action@v4.6.0'
- 'docker/login-action@v4.8.0'
- 'docker/setup-buildx-action@v4.4.1'
- 'docker/setup-qemu-action@v4.4.0'
'.github/workflows/ci.yml':
Expand Down Expand Up @@ -45,9 +45,9 @@ dependencies:
commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc'
owner_id: 5429470
repo_id: 241092383
'docker/login-action@v4.6.0':
ref: 'v4.6.0'
commit: 'sha1-dbcb813823bdd20940b903addbd779551569679f'
'docker/login-action@v4.8.0':
ref: 'v4.8.0'
commit: 'sha1-8aa5831fb8d48d8f76594c7ddde61ae58019f550'
owner_id: 5429470
repo_id: 287743349
'docker/setup-buildx-action@v4.4.1':
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/agent-image.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ jobs:
persist-credentials: false
- uses: docker/setup-qemu-action@v4.4.0
- uses: docker/setup-buildx-action@v4.4.1
- uses: docker/login-action@v4.6.0
- uses: docker/login-action@v4.8.0
if: ${{ github.event_name != 'pull_request' }}
with:
registry: ghcr.io
Expand Down
12 changes: 6 additions & 6 deletions docker/agent/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,18 +5,18 @@

# Each release tag sits beside the digest of its asset, as in scrutineer's Dockerfile.runner, so a version
# bump updates both and a mismatch fails sha256sum below.
ARG CLAUDE_AMD64_LOCK=v2.1.306@sha256:9dc640d16d8228eff9620bde9e0f70d38385a2124f4e7d0a959d0337f0e4b14a
ARG CLAUDE_ARM64_LOCK=v2.1.306@sha256:871fd7f46210c13a95a38506e03ac90abfc5125fc25a1d4f840fbab551b5cd2e
ARG CODEX_AMD64_LOCK=rust-v0.163.0@sha256:582646c6bf0561eb0de540f7fc85b9121b0091a826bc6e96830b7f1722122182
ARG CODEX_ARM64_LOCK=rust-v0.163.0@sha256:9d8ecf2d19d3e184877983902d6c85de48b3888dcb72c382a8a0c975845927fb
ARG CLAUDE_AMD64_LOCK=v2.1.319@sha256:8cf226393c8eca446d6ca60fa6bbe3fa7b5fa4de82a7b410d1edbd48689cd776
ARG CLAUDE_ARM64_LOCK=v2.1.319@sha256:2e7348ffc96d52ccb20e34c81240ebc92505edc84d7bf29182d62c29bf6fa066
ARG CODEX_AMD64_LOCK=rust-v0.167.0@sha256:3bbf75e83de6b58aed28f2cf6e33ad423ec31fd4700a1457b94be557ea5a7c6e
ARG CODEX_ARM64_LOCK=rust-v0.167.0@sha256:0de261ecf1e7f3028a7952f03fca2093f749277d38590b78bb32f8567756bbb7
ARG HARNESS_VERSION=v0.1.21

FROM golang:1.27.3-trixie@sha256:1896654cfc5c2b5ad74c07f29cb36f5d2d1cbed42e3054070fbfe444e521e83c AS proxy
FROM golang:1.27.3-trixie@sha256:af1bfc2614ebb1dbd31af514b78740fd678850e76498762b425ecee4c5c6ea80 AS proxy
ARG HARNESS_VERSION
# The egress proxy runs beside every untrusted agent container.
RUN GOBIN=/out CGO_ENABLED=0 go install -trimpath github.com/alpha-omega-security/harness/cmd/harness-proxy@${HARNESS_VERSION}

FROM debian:trixie-slim@sha256:020c0d20b9880058cbe785a9db107156c3c75c2ac944a6aa7ab59f2add76a7bd AS base
FROM debian:trixie-slim@sha256:a72b4433de1cf7d6bae0c4cee74d0547f58601a643b3375f070c51600d63b6b2 AS base
RUN apt-get update \
&& apt-get install -y --no-install-recommends ca-certificates curl git ripgrep libstdc++6 \
&& rm -rf /var/lib/apt/lists/* \
Expand Down
22 changes: 11 additions & 11 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,15 +6,15 @@ require (
github.com/alpha-omega-security/harness v0.1.21
github.com/anthropics/anthropic-sdk-go v1.84.0
github.com/git-pkgs/cwe v0.1.1
github.com/openai/openai-go/v3 v3.85.1
github.com/openai/openai-go/v3 v3.97.0
github.com/stretchr/testify v1.12.1
go.yaml.in/yaml/v3 v3.0.5
golang.org/x/crypto v0.57.0
go.yaml.in/yaml/v3 v3.0.6
golang.org/x/crypto v0.58.0
golang.org/x/sync v0.24.0
)

require (
github.com/BurntSushi/toml v1.4.1-0.20240526193622-a339e1f7089c // indirect
github.com/BurntSushi/toml v1.6.0 // indirect
github.com/bahlo/generic-list-go v0.2.0 // indirect
github.com/bitfield/gotestdox v0.2.3 // indirect
github.com/buger/jsonparser v1.6.1 // indirect
Expand All @@ -23,30 +23,30 @@ require (
github.com/dnephin/pflag v1.0.7 // indirect
github.com/fatih/color v1.19.0 // indirect
github.com/fsnotify/fsnotify v1.10.1 // indirect
github.com/git-pkgs/skills v0.2.0 // indirect
github.com/git-pkgs/skills v0.2.1 // indirect
github.com/go-logr/logr v1.4.4 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
github.com/invopop/jsonschema v0.14.0 // indirect
github.com/mattn/go-colorable v0.1.16 // indirect
github.com/mattn/go-isatty v0.0.24 // indirect
github.com/pb33f/go-yaml v0.1.0 // indirect
github.com/pb33f/go-yaml v0.1.1 // indirect
github.com/pb33f/ordered-map/v2 v2.3.2 // indirect
github.com/santhosh-tekuri/jsonschema/v6 v6.0.3 // indirect
github.com/standard-webhooks/standard-webhooks/libraries v0.0.1 // indirect
github.com/tidwall/gjson v1.20.0 // indirect
github.com/tidwall/gjson v1.20.2 // indirect
github.com/tidwall/match v1.2.0 // indirect
github.com/tidwall/pretty v1.2.2 // indirect
github.com/tidwall/sjson v1.2.5 // indirect
github.com/tidwall/pretty v1.3.0 // indirect
github.com/tidwall/sjson v1.2.9 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/otel v1.47.0 // indirect
go.opentelemetry.io/otel/log v1.47.0 // indirect
go.opentelemetry.io/otel/metric v1.47.0 // indirect
go.opentelemetry.io/otel/trace v1.47.0 // indirect
golang.org/x/exp/typeparams v0.0.0-20231108232855-2478ac86f678 // indirect
golang.org/x/exp/typeparams v0.0.0-20261106192419-47ce03d25ef0 // indirect
golang.org/x/mod v0.42.0 // indirect
golang.org/x/sys v0.49.0 // indirect
golang.org/x/telemetry v0.0.0-20261010193011-f71dc92da45e // indirect
golang.org/x/telemetry v0.0.0-20261021172232-6cd571d43fbb // indirect
golang.org/x/term v0.47.0 // indirect
golang.org/x/text v0.43.0 // indirect
golang.org/x/tools v0.52.0 // indirect
Expand Down
Loading
Loading