[golibs] Update dependencies

Pin go-tuf; see theupdateframework/go-tuf#376.

Change-Id: Ifcb868e250214e64e8c5f032331fb839c707297e
Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/722630
Fuchsia-Auto-Submit: Tamir Duberstein <[email protected]>
Reviewed-by: Evan Wildenhain <[email protected]>
Commit-Queue: Auto-Submit <[email protected]>

third_party/golibs/go.mod

@@ -3,55 +3,59 @@ module go.fuchsia.dev/fuchsia
 go 1.19
 
 require (
-	cloud.google.com/go/storage v1.18.2
-	github.com/creack/pty v1.1.17
+	cloud.google.com/go/storage v1.26.0
+	github.com/creack/pty v1.1.18
 	github.com/dustin/go-humanize v1.0.0
-	github.com/fsnotify/fsnotify v1.5.1
+	github.com/fsnotify/fsnotify v1.5.4
 	github.com/golang/glog v1.0.0
-	github.com/google/go-cmp v0.5.6
+	github.com/google/go-cmp v0.5.9
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
 	github.com/google/subcommands v1.2.0
 	github.com/kr/fs v0.1.0
 	github.com/kr/pretty v0.3.0
-	github.com/pkg/sftp v1.13.4
+	github.com/pkg/sftp v1.13.5
 	github.com/sasha-s/go-deadlock v0.3.1
 	github.com/spf13/pflag v1.0.5
-	github.com/theupdateframework/go-tuf v0.0.0-20211101164826-e8b63d20d142
+	github.com/theupdateframework/go-tuf v0.0.0-20211108161206-fc0190d925a5
 	github.com/ulikunitz/xz v0.5.10
 	github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
 	github.com/xeipuuv/gojsonschema v1.2.0
-	go.uber.org/goleak v1.1.12
-	go.uber.org/multierr v1.7.0
-	golang.org/x/crypto v0.0.0-20210921155107-089bfa567519
-	golang.org/x/net v0.0.0-20211101193420-4a448f8816b3
-	golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
-	golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e
-	gonum.org/v1/gonum v0.9.3
-	google.golang.org/api v0.64.0
-	google.golang.org/grpc v1.42.0
-	google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0
-	google.golang.org/protobuf v1.27.1
+	go.uber.org/goleak v1.2.0
+	go.uber.org/multierr v1.8.0
+	golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90
+	golang.org/x/net v0.0.0-20220907135653-1e95f45603a7
+	golang.org/x/sync v0.0.0-20220907140024-f12130a52804
+	golang.org/x/sys v0.0.0-20220908164124-27713097b956
+	gonum.org/v1/gonum v0.12.0
+	google.golang.org/api v0.95.0
+	google.golang.org/grpc v1.49.0
+	google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.2.0
+	google.golang.org/protobuf v1.28.1
 	gopkg.in/yaml.v2 v2.4.0
 	gvisor.dev/gvisor v0.0.0-20220803014006-aa41c8be0ab7
 )
 
 require (
-	cloud.google.com/go v0.99.0 // indirect
+	cloud.google.com/go v0.104.0 // indirect
+	cloud.google.com/go/compute v1.9.0 // indirect
+	cloud.google.com/go/iam v0.4.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/google/btree v1.0.1 // indirect
-	github.com/googleapis/gax-go/v2 v2.1.1 // indirect
+	github.com/google/btree v1.1.2 // indirect
+	github.com/google/uuid v1.3.0 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.1.0 // indirect
+	github.com/googleapis/gax-go/v2 v2.5.1 // indirect
 	github.com/kr/text v0.2.0 // indirect
-	github.com/petermattis/goid v0.0.0-20180202154549-b0b1615b78e5 // indirect
-	github.com/rogpeppe/go-internal v1.8.0 // indirect
+	github.com/petermattis/goid v0.0.0-20220824145935-af5520614cb6 // indirect
+	github.com/rogpeppe/go-internal v1.9.0 // indirect
 	github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613 // indirect
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
 	go.opencensus.io v0.23.0 // indirect
-	go.uber.org/atomic v1.9.0 // indirect
-	golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8 // indirect
+	go.uber.org/atomic v1.10.0 // indirect
+	golang.org/x/oauth2 v0.0.0-20220822191816-0ebed06d0094 // indirect
 	golang.org/x/text v0.3.7 // indirect
-	golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac // indirect
-	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
+	golang.org/x/time v0.0.0-20220722155302-e5dcc9cfc0b9 // indirect
+	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/genproto v0.0.0-20211223182754-3ac035c7e7cb // indirect
+	google.golang.org/genproto v0.0.0-20220908141613-51c1cc9bc6d0 // indirect
 )

third_party/golibs/update.sh

@@ -93,6 +93,11 @@ if [ $UPDATE -eq 1 ]; then
   # go branch.
   $GO get -u gvisor.dev/gvisor@go
   $GO get -u
+  # Starting with https://github.com/theupdateframework/go-tuf/commit/1e35084,
+  # go-tuf/repo.go logs directly to stdout.
+  #
+  # TODO(https://github.com/theupdateframework/go-tuf/issues/376): Remove this.
+  $GO get -u github.com/theupdateframework/go-tuf@fc0190d925a5f43942c51c5e519b8fce3b025610
 else
   $GO get
 fi