fix: This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1

This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1 Signed-off-by: Aswin A <[email protected]>
GoogleContainerTools · Jan 9, 2025 · cd16a52 · cd16a52
1 parent e328007
commit cd16a52
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/go.mod b/go.mod
@@ -14,7 +14,7 @@ require (
 	github.com/containerd/cgroups v1.1.0 // indirect
 	github.com/docker/docker v27.0.3+incompatible
 	github.com/go-git/go-billy/v5 v5.5.0
-	github.com/go-git/go-git/v5 v5.12.0
+	github.com/go-git/go-git/v5 v5.13.1
 	github.com/golang/mock v1.6.0
 	github.com/google/go-cmp v0.6.0
 	github.com/google/go-containerregistry v0.19.2