From 3ffac3da3a3bcc34c963c197b2f3c6caf5a508f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 01:03:30 +0000 Subject: [PATCH] chore(deps): bump oras.land/oras-go/v2 in /policy/slsa Bumps [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) from 2.6.0 to 2.6.2. - [Release notes](https://github.com/oras-project/oras-go/releases) - [Changelog](https://github.com/oras-project/oras-go/blob/main/RELEASES.md) - [Commits](https://github.com/oras-project/oras-go/compare/v2.6.0...v2.6.2) --- updated-dependencies: - dependency-name: oras.land/oras-go/v2 dependency-version: 2.6.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- policy/slsa/go.mod | 2 +- policy/slsa/go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/policy/slsa/go.mod b/policy/slsa/go.mod index 6f764a0..dd4e973 100644 --- a/policy/slsa/go.mod +++ b/policy/slsa/go.mod @@ -19,7 +19,7 @@ require ( golang.org/x/sync v0.22.0 // indirect golang.org/x/sys v0.45.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect - oras.land/oras-go/v2 v2.6.0 // indirect + oras.land/oras-go/v2 v2.6.2 // indirect ) replace github.com/meigma/blob => ../.. diff --git a/policy/slsa/go.sum b/policy/slsa/go.sum index d433cdd..49fb7e5 100644 --- a/policy/slsa/go.sum +++ b/policy/slsa/go.sum @@ -116,5 +116,5 @@ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= -oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= -oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= +oras.land/oras-go/v2 v2.6.2 h1:N04RXngAp1LJKTG6ifz3xHPipasEkWr+hFmInja5YKo= +oras.land/oras-go/v2 v2.6.2/go.mod h1:PlTtg4JTDJkDe8yVHpM2wz7/YDc00GVas+i4jAW2TZ4=