@@ -66,7 +66,7 @@ replace github.com/charmbracelet/bubbletea => github.com/coder/bubbletea v1.2.2-
6666
6767// Trivy has some issues that we're floating patches for, and will hopefully
6868// be upstreamed eventually.
69- replace github.com/aquasecurity/trivy => github.com/coder/trivy v0.0.0-20250409153844-e6b004bc465a
69+ replace github.com/aquasecurity/trivy => github.com/coder/trivy v0.0.0-20250527170238-9416a59d7019
7070
7171// afero/tarfs has a bug that breaks our usage. A PR has been submitted upstream.
7272// https://github.com/spf13/afero/pull/487
@@ -196,7 +196,7 @@ require (
196196 go.uber.org/mock v0.5.0
197197 go4.org/netipx v0.0.0-20230728180743-ad4cb58a6516
198198 golang.org/x/crypto v0.38.0
199- golang.org/x/exp v0.0.0-20250210185358-939b2ce775ac
199+ golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0
200200 golang.org/x/mod v0.24.0
201201 golang.org/x/net v0.40.0
202202 golang.org/x/oauth2 v0.29.0
@@ -256,8 +256,8 @@ require (
256256 github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c // indirect
257257 github.com/atotto/clipboard v0.1.4 // indirect
258258 github.com/aws/aws-sdk-go-v2 v1.36.3
259- github.com/aws/aws-sdk-go-v2/config v1.29.13
260- github.com/aws/aws-sdk-go-v2/credentials v1.17.66 // indirect
259+ github.com/aws/aws-sdk-go-v2/config v1.29.14
260+ github.com/aws/aws-sdk-go-v2/credentials v1.17.67 // indirect
261261 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
262262 github.com/aws/aws-sdk-go-v2/feature/rds/auth v1.5.1
263263 github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
@@ -268,7 +268,7 @@ require (
268268 github.com/aws/aws-sdk-go-v2/service/ssm v1.52.4 // indirect
269269 github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 // indirect
270270 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 // indirect
271- github.com/aws/aws-sdk-go-v2/service/sts v1.33.18 // indirect
271+ github.com/aws/aws-sdk-go-v2/service/sts v1.33.19 // indirect
272272 github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
273273 github.com/aymerick/douceur v0.2.0 // indirect
274274 github.com/beorn7/perks v1.0.1 // indirect
@@ -280,12 +280,12 @@ require (
280280 github.com/chromedp/sysutil v1.1.0 // indirect
281281 github.com/cihub/seelog v0.0.0-20170130134532-f561c5e57575 // indirect
282282 github.com/clbanning/mxj/v2 v2.7.0 // indirect
283- github.com/cloudflare/circl v1.6.0 // indirect
283+ github.com/cloudflare/circl v1.6.1 // indirect
284284 github.com/containerd/continuity v0.4.5 // indirect
285285 github.com/coreos/go-iptables v0.6.0 // indirect
286286 github.com/dlclark/regexp2 v1.11.5 // indirect
287- github.com/docker/cli v28.0.4 +incompatible // indirect
288- github.com/docker/docker v28.0.4 +incompatible // indirect
287+ github.com/docker/cli v28.1.1 +incompatible // indirect
288+ github.com/docker/docker v28.1.1 +incompatible // indirect
289289 github.com/docker/go-connections v0.5.0 // indirect
290290 github.com/docker/go-units v0.5.0 // indirect
291291 github.com/dop251/goja v0.0.0-20241024094426-79f3a7efcdbd // indirect
@@ -304,7 +304,7 @@ require (
304304 github.com/go-openapi/jsonpointer v0.21.0 // indirect
305305 github.com/go-openapi/jsonreference v0.21.0 // indirect
306306 github.com/go-openapi/spec v0.21.0 // indirect
307- github.com/go-openapi/swag v0.23.0 // indirect
307+ github.com/go-openapi/swag v0.23.1 // indirect
308308 github.com/go-playground/locales v0.14.1 // indirect
309309 github.com/go-playground/universal-translator v0.18.1 // indirect
310310 github.com/go-sourcemap/sourcemap v2.1.3+incompatible // indirect
@@ -320,7 +320,7 @@ require (
320320 github.com/gohugoio/hashstructure v0.5.0 // indirect
321321 github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
322322 github.com/golang/protobuf v1.5.4 // indirect
323- github.com/google/btree v1.1.2 // indirect
323+ github.com/google/btree v1.1.3 // indirect
324324 github.com/google/go-querystring v1.1.0 // indirect
325325 github.com/google/nftables v0.2.0 // indirect
326326 github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db // indirect
@@ -361,7 +361,7 @@ require (
361361 github.com/leodido/go-urn v1.4.0 // indirect
362362 github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
363363 github.com/lufia/plan9stats v0.0.0-20240226150601-1dcf7310316a // indirect
364- github.com/mailru/easyjson v0.7.7 // indirect
364+ github.com/mailru/easyjson v0.9.0 // indirect
365365 github.com/mattn/go-colorable v0.1.14 // indirect
366366 github.com/mattn/go-localereader v0.0.1 // indirect
367367 github.com/mattn/go-runewidth v0.0.16 // indirect
@@ -409,7 +409,7 @@ require (
409409 github.com/secure-systems-lab/go-securesystemslib v0.9.0 // indirect
410410 github.com/sirupsen/logrus v1.9.3 // indirect
411411 github.com/spaolacci/murmur3 v1.1.0 // indirect
412- github.com/spf13/cast v1.7.1 // indirect
412+ github.com/spf13/cast v1.8.0 // indirect
413413 github.com/swaggo/files/v2 v2.0.0 // indirect
414414 github.com/tadvi/systray v0.0.0-20190226123456-11a2b8fa57af // indirect
415415 github.com/tailscale/certstore v0.1.1-0.20220316223106-78d6e1c49d8d // indirect
@@ -442,7 +442,7 @@ require (
442442 github.com/yuin/goldmark v1.7.10 // indirect
443443 github.com/yuin/goldmark-emoji v1.0.6 // indirect
444444 github.com/yusufpapurcu/wmi v1.2.4 // indirect
445- github.com/zclconf/go-cty v1.16.2
445+ github.com/zclconf/go-cty v1.16.3
446446 github.com/zeebo/errs v1.4.0 // indirect
447447 go.opentelemetry.io/auto/sdk v1.1.0 // indirect
448448 go.opentelemetry.io/collector/component v0.120.0 // indirect
@@ -485,7 +485,7 @@ require (
485485
486486require (
487487 github.com/anthropics/anthropic-sdk-go v0.2.0-beta.3
488- github.com/coder/preview v0.0.2-0.20250521212114-e6a60ffa74f2
488+ github.com/coder/preview v0.0.2-0.20250527172548-ab173d35040c
489489 github.com/fsnotify/fsnotify v1.9.0
490490 github.com/kylecarbs/aisdk-go v0.0.8
491491 github.com/mark3labs/mcp-go v0.30.0
@@ -496,7 +496,7 @@ require (
496496require (
497497 cel.dev/expr v0.20.0 // indirect
498498 cloud.google.com/go v0.120.0 // indirect
499- cloud.google.com/go/iam v1.4.0 // indirect
499+ cloud.google.com/go/iam v1.4.1 // indirect
500500 cloud.google.com/go/monitoring v1.24.0 // indirect
501501 cloud.google.com/go/storage v1.50.0 // indirect
502502 github.com/DataDog/datadog-agent/comp/core/tagger/origindetection v0.64.0-rc.1 // indirect
@@ -506,21 +506,21 @@ require (
506506 github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.50.0 // indirect
507507 github.com/aquasecurity/go-version v0.0.1 // indirect
508508 github.com/aquasecurity/trivy v0.58.2 // indirect
509- github.com/aws/aws-sdk-go v1.55.6 // indirect
509+ github.com/aws/aws-sdk-go v1.55.7 // indirect
510510 github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
511511 github.com/charmbracelet/x/exp/slice v0.0.0-20250327172914-2fdc97757edf // indirect
512512 github.com/cncf/xds/go v0.0.0-20250121191232-2f005788dc42 // indirect
513513 github.com/dgryski/go-farm v0.0.0-20240924180020-3414d57e47da // indirect
514514 github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
515515 github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
516- github.com/gorilla/websocket v1.5.3 // indirect
516+ github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
517517 github.com/hashicorp/go-getter v1.7.8 // indirect
518518 github.com/hashicorp/go-safetemp v1.0.0 // indirect
519519 github.com/klauspost/cpuid/v2 v2.2.10 // indirect
520- github.com/moby/sys/user v0.3 .0 // indirect
520+ github.com/moby/sys/user v0.4 .0 // indirect
521521 github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
522522 github.com/puzpuzpuz/xsync/v3 v3.5.1 // indirect
523- github.com/samber/lo v1.49.1 // indirect
523+ github.com/samber/lo v1.50.0 // indirect
524524 github.com/spiffe/go-spiffe/v2 v2.5.0 // indirect
525525 github.com/tidwall/sjson v1.2.5 // indirect
526526 github.com/ulikunitz/xz v0.5.12 // indirect
0 commit comments