Auto-update license files

Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.11.0 to 5.12.0. - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
2024-04-01 20:16:04 +00:00 · 2024-04-01 20:14:43 +00:00
131 changed files with 1152 additions and 583 deletions
@@ -1,8 +1,8 @@
 ---
 name: github.com/ProtonMail/go-crypto/bitcurves
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/bitcurves
 license: other
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/brainpool
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package brainpool implements Brainpool elliptic curves.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/brainpool
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/eax
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: 'Package eax provides an implementation of the EAX (encrypt-authenticate-translate)
  mode of operation, as described in Bellare, Rogaway, and Wagner "THE EAX MODE OF
@@ -1,8 +1,8 @@
 ---
 name: github.com/ProtonMail/go-crypto/internal/byteutil
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/internal/byteutil
 license: other
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/ocb
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: 'Package ocb provides an implementation of the OCB (offset codebook) mode
  of operation, as described in RFC-7253 of the IRTF and in Rogaway, Bellare, Black
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package openpgp implements high level operations on OpenPGP messages.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package keywrap is an implementation of the RFC 3394 AES key wrapping algorithm.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/armor
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package armor implements OpenPGP ASCII Armor, see RFC 4880.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/armor
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/ecdh
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package ecdh implements ECDH encryption, suitable for OpenPGP, as specified
  in RFC 6637, section 8.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/ecdsa
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package ecdsa implements ECDSA signature, suitable for OpenPGP, as specified
  in RFC 6637, section 5.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/eddsa
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package eddsa implements EdDSA signature, suitable for OpenPGP, as specified
  in https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-crypto-refresh-06#section-13.7
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/elgamal
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package elgamal implements ElGamal encryption, suitable for OpenPGP, as specified
  in "A Public-Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms,"
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/errors
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package errors contains common error types for the OpenPGP packages.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/errors
@@ -1,8 +1,8 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/internal/algorithm
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/internal/algorithm
 license: other
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/internal/ecc
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package ecc implements a generic interface for ECDH, ECDSA, and EdDSA.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/internal/ecc
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/internal/encoding
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package encoding implements openpgp packet field encodings as specified in
  RFC 4880 and 6637.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/packet
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package packet implements parsing and serialization of OpenPGP packets, as
  specified in RFC 4880.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/s2k
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package s2k implements the various OpenPGP string-to-key transforms as specified
  in RFC 4800 section 3.7.1, and Argon2 specified in draft-ietf-openpgp-crypto-refresh-08
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: A highly extensible git implementation in pure Go.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/config
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package config contains the abstraction of multiple config files
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/config
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/internal/path_util
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/internal/path_util
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/internal/revision
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: 'Package revision extracts git revision from string More information about
  revision : https://www.kernel.org/pub/software/scm/git/docs/gitrevisions.html'
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/internal/url
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/internal/url
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: package plumbing implement the core interfaces and structs used by go-git
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/cache
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/cache
 license: apache-2.0
 licenses:
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/color
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/color
 license: apache-2.0
 licenses:
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/filemode
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/filemode
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/config
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package config implements encoding and decoding of git config files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/config
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/diff
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/diff
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/gitignore
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package gitignore implements matching file system paths to gitignore patterns
  that can be automatically read from a git repository tree in the order of definition
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/idxfile
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package idxfile implements encoding and decoding of packfile idx files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/idxfile
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/index
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package index implements encoding and decoding of index format files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/index
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/objfile
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package objfile implements encoding and decoding of object files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/objfile
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/packfile
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package packfile implements encoding and decoding of packfile format.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/packfile
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/pktline
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package pktline implements reading payloads form pkt-lines and encoding pkt-lines
  from payloads.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/hash
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: package hash provides a way for managing the underlying hash implementations
  used across go-git.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/object
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package object contains implementations of all Git objects and utility functions
  to work with them.
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/protocol/packp
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/protocol/packp
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/protocol/packp/capability
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package capability defines the server and client capabilities.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/protocol/packp/capability
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/protocol/packp/sideband
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package sideband implements a sideband mutiplex/demultiplexer
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/protocol/packp/sideband
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/revlist
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package revlist provides support to access the ancestors of commits, in a
  similar way as the git-rev-list command.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/storer
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package storer defines the interfaces to store objects, references, etc.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/storer
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package transport includes the implementation for different transport protocols.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/client
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package client contains helper function to deal with the different client
  protocols.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/file
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package file implements the file transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/file
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/git
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package git implements the git transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/git
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/http
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package http implements the HTTP transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/http
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/internal/common
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package common implements the git pack protocol with a pluggable transport.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/internal/common
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/server
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package server implements the git server protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/server
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/ssh
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package ssh implements the SSH transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/ssh
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/storage
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage/filesystem
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package filesystem is a storage backend base on filesystems
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage/filesystem
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage/filesystem/dotgit
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: https://github.com/git/git/blob/master/Documentation/gitrepository-layout.txt
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage/filesystem/dotgit
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage/memory
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package memory is a storage backend base on memory
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage/memory
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/binary
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package binary implements syntax-sugar functions on top of the standard library
  binary package
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/diff
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package diff implements line oriented diffs, similar to the ancient Unix
  diff command.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/ioutil
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package ioutil implements some I/O utility functions.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/ioutil
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package merkletrie provides support for n-ary trees that are at the same
  time Merkle trees and Radix trees (tries).
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/filesystem
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/merkletrie/filesystem
 license: apache-2.0
 licenses:
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/index
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/merkletrie/index
 license: apache-2.0
 licenses:
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/internal/frame
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/merkletrie/internal/frame
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/noder
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package noder provide an interface for defining nodes in a merkletrie, their
  hashes and their paths (a noders and its ancestors).
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/utils/sync
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/sync
 license: apache-2.0
 licenses:
@@ -1,8 +1,8 @@
 ---
 name: github.com/go-git/go-git/v5/utils/trace
-version: v5.11.0
+version: v5.12.0
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/trace
 license: apache-2.0
 licenses:
@@ -1,6 +1,6 @@
 ---
 name: github.com/sergi/go-diff/diffmatchpatch
-version: v1.2.0
+version: v1.3.2-0.20230802210424-5b0b94c5c0d3
 type: go
 summary: Package diffmatchpatch offers robust algorithms to perform the operations
  required for synchronizing plain text.
@@ -30,4 +30,3 @@ licenses:
    DEALINGS IN THE SOFTWARE.

 notices: []
-...
@@ -1,6 +1,6 @@
 ---
 name: github.com/skeema/knownhosts
-version: v1.2.1
+version: v1.2.2
 type: go
 summary: Package knownhosts is a thin wrapper around golang.org/x/crypto/ssh/knownhosts,
  adding the ability to obtain the list of host key algorithms for a known host.
@@ -212,7 +212,7 @@ licenses:
       limitations under the License.
 - sources: README.md
  text: |-
-    **Source code copyright 2023 Skeema LLC and the Skeema Knownhosts authors**
+    **Source code copyright 2024 Skeema LLC and the Skeema Knownhosts authors**

    ```text
    Licensed under the Apache License, Version 2.0 (the "License");
@@ -230,7 +230,7 @@ licenses:
 notices:
 - sources: NOTICE
  text: |-
-    Copyright 2023 Skeema LLC and the Skeema Knownhosts authors
+    Copyright 2024 Skeema LLC and the Skeema Knownhosts authors

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/argon2
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package argon2 implements the key derivation function Argon2.
 homepage: https://pkg.go.dev/golang.org/x/crypto/argon2
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/blake2b
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package blake2b implements the BLAKE2b hash algorithm defined by RFC 7693
  and the extendable output function (XOF) BLAKE2Xb.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/blowfish
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package blowfish implements Bruce Schneier's Blowfish encryption algorithm.
 homepage: https://pkg.go.dev/golang.org/x/crypto/blowfish
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/cast5
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package cast5 implements CAST5, as defined in RFC 2144.
 homepage: https://pkg.go.dev/golang.org/x/crypto/cast5
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/curve25519
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package curve25519 provides an implementation of the X25519 function, which
  performs scalar multiplication on the elliptic curve known as Curve25519.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package openpgp implements high level operations on OpenPGP messages.
 homepage: https://pkg.go.dev/golang.org/x/crypto/openpgp
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/armor
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package armor implements OpenPGP ASCII Armor, see RFC 4880.
 homepage: https://pkg.go.dev/golang.org/x/crypto/openpgp/armor
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/elgamal
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package elgamal implements ElGamal encryption, suitable for OpenPGP, as specified
  in "A Public-Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms,"
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/errors
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package errors contains common error types for the OpenPGP packages.
 homepage: https://pkg.go.dev/golang.org/x/crypto/openpgp/errors
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/packet
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package packet implements parsing and serialization of OpenPGP packets, as
  specified in RFC 4880.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/s2k
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package s2k implements the various OpenPGP string-to-key transforms as specified
  in RFC 4800 section 3.7.1.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/sha3
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package sha3 implements the SHA-3 fixed-output-length hash functions and
  the SHAKE variable-output-length hash functions defined by FIPS-202.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package ssh implements an SSH client and server.
 homepage: https://pkg.go.dev/golang.org/x/crypto/ssh
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh/agent
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package agent implements the ssh-agent protocol, and provides both a client
  and a server.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package bcrypt_pbkdf implements bcrypt_pbkdf(3) from OpenBSD.
 homepage: https://pkg.go.dev/golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh/knownhosts
-version: v0.19.0
+version: v0.21.0
 type: go
 summary: Package knownhosts implements a parser for the OpenSSH known_hosts host key
  database, and provides utility functions for writing OpenSSH compliant known_hosts
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/net/context
-version: v0.21.0
+version: v0.22.0
 type: go
 summary: Package context defines the Context type, which carries deadlines, cancelation
  signals, and other request-scoped values across API boundaries and between processes.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/net/internal/socks
-version: v0.21.0
+version: v0.22.0
 type: go
 summary: Package socks provides a SOCKS version 5 client implementation.
 homepage: https://pkg.go.dev/golang.org/x/net/internal/socks
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/net/proxy
-version: v0.21.0
+version: v0.22.0
 type: go
 summary: Package proxy provides support for a variety of protocols to proxy network
  data.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/sys/execabs
-version: v0.17.0
+version: v0.18.0
 type: go
 summary: Package execabs is a drop-in replacement for os/exec that requires PATH lookups
  to find absolute paths.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/sys/unix
-version: v0.17.0
+version: v0.18.0
 type: go
 summary: Package unix contains an interface to the low-level operating system primitives.
 homepage: https://pkg.go.dev/golang.org/x/sys/unix
@@ -3,19 +3,19 @@ module github.com/actions/actions-sync
 go 1.21

 require (
-	github.com/go-git/go-git/v5 v5.11.0
+	github.com/go-git/go-git/v5 v5.12.0
 	github.com/google/go-github/v43 v43.0.0
 	github.com/gorilla/mux v1.8.1
 	github.com/pkg/errors v0.9.1
 	github.com/spf13/cobra v1.8.0
-	github.com/stretchr/testify v1.8.4
+	github.com/stretchr/testify v1.9.0
 	golang.org/x/oauth2 v0.17.0
 )

 require (
 	dario.cat/mergo v1.0.0 // indirect
 	github.com/Microsoft/go-winio v0.6.1 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
+	github.com/ProtonMail/go-crypto v1.0.0 // indirect
 	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
@@ -30,14 +30,14 @@ require (
 	github.com/kevinburke/ssh_config v1.2.0 // indirect
 	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/sergi/go-diff v1.2.0 // indirect
-	github.com/skeema/knownhosts v1.2.1 // indirect
+	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
+	github.com/skeema/knownhosts v1.2.2 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
-	golang.org/x/crypto v0.19.0 // indirect
+	golang.org/x/crypto v0.21.0 // indirect
 	golang.org/x/mod v0.12.0 // indirect
-	golang.org/x/net v0.21.0 // indirect
-	golang.org/x/sys v0.17.0 // indirect
+	golang.org/x/net v0.22.0 // indirect
+	golang.org/x/sys v0.18.0 // indirect
 	golang.org/x/tools v0.13.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/protobuf v1.31.0 // indirect
@@ -3,8 +3,8 @@ dario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
 github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v8QkMxJ6pZY=
 github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
 github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
-github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 h1:kkhsdkhsCvIsutKu5zLMgWtgh9YxGCNAw8Ad8hjwfYg=
-github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371/go.mod h1:EjAoLdwvbIOoOQr3ihjnSoLZRtE8azugULFRteWMNc0=
+github.com/ProtonMail/go-crypto v1.0.0 h1:LRuvITjQWX+WIfr930YHG2HNfjR1uOfyf5vE0kC2U78=
+github.com/ProtonMail/go-crypto v1.0.0/go.mod h1:EjAoLdwvbIOoOQr3ihjnSoLZRtE8azugULFRteWMNc0=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
 github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio=
@@ -23,16 +23,16 @@ github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a h1:mATvB/9r/3gvcej
 github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
 github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
 github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
-github.com/gliderlabs/ssh v0.3.5 h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY=
-github.com/gliderlabs/ssh v0.3.5/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4=
+github.com/gliderlabs/ssh v0.3.7 h1:iV3Bqi942d9huXnzEF2Mt+CY9gLu8DNM4Obd+8bODRE=
+github.com/gliderlabs/ssh v0.3.7/go.mod h1:zpHEXBstFnQYtGnB8k8kQLol82umzn/2/snG7alWVD8=
 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic=
 github.com/go-git/go-billy/v5 v5.5.0 h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU=
 github.com/go-git/go-billy/v5 v5.5.0/go.mod h1:hmexnoNsr2SJU1Ju67OaNz5ASJY3+sHgFRpCtpDCKow=
 github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4=
 github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII=
-github.com/go-git/go-git/v5 v5.11.0 h1:XIZc1p+8YzypNr34itUfSvYJcv+eYdTnTvOZ2vD3cA4=
-github.com/go-git/go-git/v5 v5.11.0/go.mod h1:6GFcX2P3NM7FPBfpePbpLd21XxsgdAt+lKqXmCUiUCY=
+github.com/go-git/go-git/v5 v5.12.0 h1:7Md+ndsjrzZxbddRDZjF14qK+NN56sy6wkqaVrjZtys=
+github.com/go-git/go-git/v5 v5.12.0/go.mod h1:FTM9VKtnI2m65hNI/TenDDDnUf2Q9FHnXYjuz9i5OEY=
 github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE=
 github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
@@ -73,11 +73,11 @@ github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZN
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/sergi/go-diff v1.2.0 h1:XU+rvMAioB0UC3q1MFrIQy4Vo5/4VsRDQQXHsEya6xQ=
-github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
+github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
+github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
 github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
-github.com/skeema/knownhosts v1.2.1 h1:SHWdIUa82uGZz+F+47k8SY4QhhI291cXCpopT1lK2AQ=
-github.com/skeema/knownhosts v1.2.1/go.mod h1:xYbVRSPxqBZFrdmDyMmsOs+uX1UZC3nTN3ThzgDxUwo=
+github.com/skeema/knownhosts v1.2.2 h1:Iug2P4fLmDw9f41PB6thxUkNUkJzB5i+1/exaj40L3A=
+github.com/skeema/knownhosts v1.2.2/go.mod h1:xYbVRSPxqBZFrdmDyMmsOs+uX1UZC3nTN3ThzgDxUwo=
 github.com/spf13/cobra v1.8.0 h1:7aJaZx1B85qltLMc546zn58BxxfZdR/W22ej9CFoEf0=
 github.com/spf13/cobra v1.8.0/go.mod h1:WXLWApfZ71AjXPya3WOlMsY9yMs7YeiHhFVlvLyhcho=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
@@ -85,8 +85,8 @@ github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
-github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
-github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
+github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
 github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
@@ -95,8 +95,8 @@ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5y
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.19.0 h1:ENy+Az/9Y1vSrlrvBSyna3PITt4tiZLf7sgCjZBX7Wo=
-golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
+golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA=
+golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0 h1:rmsUpXtvNzj340zd98LZ4KntptpfRHwpFOHG188oHXc=
@@ -109,8 +109,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
-golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4=
-golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
+golang.org/x/net v0.22.0 h1:9sGLhx7iRIHEiX0oAJ3MRZMUCElJgy7Br1nO+AMN3Tc=
+golang.org/x/net v0.22.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg=
 golang.org/x/oauth2 v0.17.0 h1:6m3ZPmLEFdVxKKWnKq4VqZ60gutO35zm+zrAHVmHyDQ=
 golang.org/x/oauth2 v0.17.0/go.mod h1:OzPDGQiuQMguemayvdylqddI7qcD9lnSDb+1FiwQ5HA=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -131,15 +131,15 @@ golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.17.0 h1:25cE3gD+tdBA7lp7QfhuV+rJiE9YXTcS3VG1SqssI/Y=
-golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4=
+golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.17.0 h1:mkTF7LCd6WGJNL3K1Ad7kwxNfYAW6a8a8QqtMblp/4U=
-golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
+golang.org/x/term v0.18.0 h1:FcHjZXDMxI8mM3nwhX9HlKop4C0YQvCVCdwYl2wOtE8=
+golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -171,6 +171,6 @@ gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EV
 gopkg.in/warnings.v0 v0.1.2 h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME=
 gopkg.in/warnings.v0 v0.1.2/go.mod h1:jksf8JmL6Qr/oQM2OXTHunEvvTAsrWBLb6OOjuVWRNI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
-gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
@@ -73,7 +73,9 @@ func (c *x448) GenerateECDH(rand io.Reader) (point []byte, secret []byte, err er
 func (c *x448) Encaps(rand io.Reader, point []byte) (ephemeral, sharedSecret []byte, err error) {
 	var pk, ss x448lib.Key
 	seed, e, err := c.generateKeyPairBytes(rand)
-
+	if err != nil {
+		return nil, nil, err
+	}
 	copy(pk[:], point)
 	x448lib.Shared(&ss, &seed, &pk)

@@ -27,14 +27,14 @@ compatibility status with go-git.

 ## Branching and merging

-| Feature     | Sub-feature | Status | Notes                                   | Examples                                                                                        |
-| ----------- | ----------- | ------ | --------------------------------------- | ----------------------------------------------------------------------------------------------- |
-| `branch`    |             | ✅     |                                         | - [branch](_examples/branch/main.go)                                                            |
-| `checkout`  |             | ✅     | Basic usages of checkout are supported. | - [checkout](_examples/checkout/main.go)                                                        |
-| `merge`     |             | ❌     |                                         |                                                                                                 |
-| `mergetool` |             | ❌     |                                         |                                                                                                 |
-| `stash`     |             | ❌     |                                         |                                                                                                 |
-| `tag`       |             | ✅     |                                         | - [tag](_examples/tag/main.go) <br/> - [tag create and push](_examples/tag-create-push/main.go) |
+| Feature     | Sub-feature | Status       | Notes                                   | Examples                                                                                        |
+| ----------- | ----------- | ------------ | --------------------------------------- | ----------------------------------------------------------------------------------------------- |
+| `branch`    |             | ✅           |                                         | - [branch](_examples/branch/main.go)                                                            |
+| `checkout`  |             | ✅           | Basic usages of checkout are supported. | - [checkout](_examples/checkout/main.go)                                                        |
+| `merge`     |             | ⚠️ (partial) | Fast-forward only                       |                                                                                                 |
+| `mergetool` |             | ❌           |                                         |                                                                                                 |
+| `stash`     |             | ❌           |                                         |                                                                                                 |
+| `tag`       |             | ✅           |                                         | - [tag](_examples/tag/main.go) <br/> - [tag create and push](_examples/tag-create-push/main.go) |

 ## Sharing and updating projects

@@ -28,6 +28,7 @@ build-git:
 test:
 	@echo "running against `git version`"; \
 	$(GOTEST) -race ./...
+	$(GOTEST) -v _examples/common_test.go _examples/common.go --examples

 TEMP_REPO := $(shell mktemp)
 test-sha256:
@@ -89,6 +89,25 @@ type CloneOptions struct {
 	Shared bool
 }

+// MergeOptions describes how a merge should be performed.
+type MergeOptions struct {
+	// Strategy defines the merge strategy to be used.
+	Strategy MergeStrategy
+}
+
+// MergeStrategy represents the different types of merge strategies.
+type MergeStrategy int8
+
+const (
+	// FastForwardMerge represents a Git merge strategy where the current
+	// branch can be simply updated to point to the HEAD of the branch being
+	// merged. This is only possible if the history of the branch being merged
+	// is a linear descendant of the current branch, with no conflicting commits.
+	//
+	// This is the default option.
+	FastForwardMerge MergeStrategy = iota
+)
+
 // Validate validates the fields and sets the default values.
 func (o *CloneOptions) Validate() error {
 	if o.URL == "" {
@@ -166,7 +185,7 @@ const (
 	// AllTags fetch all tags from the remote (i.e., fetch remote tags
 	// refs/tags/* into local tags with the same name)
 	AllTags
-	//NoTags fetch no tags from the remote at all
+	// NoTags fetch no tags from the remote at all
 	NoTags
 )

@@ -198,6 +217,9 @@ type FetchOptions struct {
 	CABundle []byte
 	// ProxyOptions provides info required for connecting to a proxy.
 	ProxyOptions transport.ProxyOptions
+	// Prune specify that local refs that match given RefSpecs and that do
+	// not exist remotely will be removed.
+	Prune bool
 }

 // Validate validates the fields and sets the default values.
@@ -324,9 +346,9 @@ var (

 // CheckoutOptions describes how a checkout operation should be performed.
 type CheckoutOptions struct {
-	// Hash is the hash of the commit to be checked out. If used, HEAD will be
-	// in detached mode. If Create is not used, Branch and Hash are mutually
-	// exclusive.
+	// Hash is the hash of a commit or tag to be checked out. If used, HEAD
+	// will be in detached mode. If Create is not used, Branch and Hash are
+	// mutually exclusive.
 	Hash plumbing.Hash
 	// Branch to be checked out, if Branch and Hash are empty is set to `master`.
 	Branch plumbing.ReferenceName
@@ -405,6 +427,11 @@ func (o *ResetOptions) Validate(r *Repository) error {
 		}

 		o.Commit = ref.Hash()
+	} else {
+		_, err := r.CommitObject(o.Commit)
+		if err != nil {
+			return fmt.Errorf("invalid reset option: %w", err)
+		}
 	}

 	return nil
@@ -474,6 +501,11 @@ type AddOptions struct {
 	// Glob adds all paths, matching pattern, to the index. If pattern matches a
 	// directory path, all directory contents are added to the index recursively.
 	Glob string
+	// SkipStatus adds the path with no status check. This option is relevant only
+	// when the `Path` option is specified and does not apply when the `All` option is used.
+	// Notice that when passing an ignored path it will be added anyway.
+	// When true it can speed up adding files to the worktree in very large repositories.
+	SkipStatus bool
 }

 // Validate validates the fields and sets the default values.
@@ -507,6 +539,10 @@ type CommitOptions struct {
 	// commit will not be signed. The private key must be present and already
 	// decrypted.
 	SignKey *openpgp.Entity
+	// Signer denotes a cryptographic signer to sign the commit with.
+	// A nil value here means the commit will not be signed.
+	// Takes precedence over SignKey.
+	Signer Signer
 	// Amend will create a new commit object and replace the commit that HEAD currently
 	// points to. Cannot be used with All nor Parents.
 	Amend bool
@@ -116,7 +116,7 @@ func loadPatterns(fs billy.Filesystem, path string) (ps []Pattern, err error) {
 	return
 }

-// LoadGlobalPatterns loads gitignore patterns from from the gitignore file
+// LoadGlobalPatterns loads gitignore patterns from the gitignore file
 // declared in a user's ~/.gitconfig file.  If the ~/.gitconfig file does not
 // exist the function will return nil.  If the core.excludesfile property
 // is not declared, the function will return nil.  If the file pointed to by
@@ -132,7 +132,7 @@ func LoadGlobalPatterns(fs billy.Filesystem) (ps []Pattern, err error) {
 	return loadPatterns(fs, fs.Join(home, gitconfigFile))
 }

-// LoadSystemPatterns loads gitignore patterns from from the gitignore file
+// LoadSystemPatterns loads gitignore patterns from the gitignore file
 // declared in a system's /etc/gitconfig file.  If the /etc/gitconfig file does
 // not exist the function will return nil.  If the core.excludesfile property
 // is not declared, the function will return nil.  If the file pointed to by
@@ -27,7 +27,7 @@ const (
 	// the commit with the "mergetag" header.
 	headermergetag string = "mergetag"

-	defaultUtf8CommitMesageEncoding MessageEncoding = "UTF-8"
+	defaultUtf8CommitMessageEncoding MessageEncoding = "UTF-8"
 )

 // Hash represents the hash of an object
@@ -189,7 +189,7 @@ func (c *Commit) Decode(o plumbing.EncodedObject) (err error) {
 	}

 	c.Hash = o.Hash()
-	c.Encoding = defaultUtf8CommitMesageEncoding
+	c.Encoding = defaultUtf8CommitMessageEncoding

 	reader, err := o.Reader()
 	if err != nil {
@@ -335,7 +335,7 @@ func (c *Commit) encode(o plumbing.EncodedObject, includeSig bool) (err error) {
 		}
 	}

-	if string(c.Encoding) != "" && c.Encoding != defaultUtf8CommitMesageEncoding {
+	if string(c.Encoding) != "" && c.Encoding != defaultUtf8CommitMessageEncoding {
 		if _, err = fmt.Fprintf(w, "\n%s %s", headerencoding, c.Encoding); err != nil {
 			return err
 		}
@@ -57,6 +57,8 @@ func (c *commitPathIter) Next() (*Commit, error) {
 }

 func (c *commitPathIter) getNextFileCommit() (*Commit, error) {
+	var parentTree, currentTree *Tree
+
 	for {
 		// Parent-commit can be nil if the current-commit is the initial commit
 		parentCommit, parentCommitErr := c.sourceIter.Next()
@@ -68,13 +70,17 @@ func (c *commitPathIter) getNextFileCommit() (*Commit, error) {
 			parentCommit = nil
 		}

-		// Fetch the trees of the current and parent commits
-		currentTree, currTreeErr := c.currentCommit.Tree()
-		if currTreeErr != nil {
-			return nil, currTreeErr
+		if parentTree == nil {
+			var currTreeErr error
+			currentTree, currTreeErr = c.currentCommit.Tree()
+			if currTreeErr != nil {
+				return nil, currTreeErr
+			}
+		} else {
+			currentTree = parentTree
+			parentTree = nil
 		}

-		var parentTree *Tree
 		if parentCommit != nil {
 			var parentTreeErr error
 			parentTree, parentTreeErr = parentCommit.Tree()
@@ -115,7 +121,8 @@ func (c *commitPathIter) hasFileChange(changes Changes, parent *Commit) bool {

 		// filename matches, now check if source iterator contains all commits (from all refs)
 		if c.checkParent {
-			if parent != nil && isParentHash(parent.Hash, c.currentCommit) {
+			// Check if parent is beyond the initial commit
+			if parent == nil || isParentHash(parent.Hash, c.currentCommit) {
 				return true
 			}
 			continue
@@ -6,7 +6,7 @@ import (
 	"errors"
 	"fmt"
 	"io"
-	"math"
+	"strconv"
 	"strings"

 	"github.com/go-git/go-git/v5/plumbing"
@@ -234,69 +234,56 @@ func (fileStats FileStats) String() string {
 	return printStat(fileStats)
 }

+// printStat prints the stats of changes in content of files.
+// Original implementation: https://github.com/git/git/blob/1a87c842ece327d03d08096395969aca5e0a6996/diff.c#L2615
+// Parts of the output:
+// <pad><filename><pad>|<pad><changeNumber><pad><+++/---><newline>
+// example: " main.go | 10 +++++++--- "
 func printStat(fileStats []FileStat) string {
-	padLength := float64(len(" "))
-	newlineLength := float64(len("\n"))
-	separatorLength := float64(len("|"))
-	// Soft line length limit. The text length calculation below excludes
-	// length of the change number. Adding that would take it closer to 80,
-	// but probably not more than 80, until it's a huge number.
-	lineLength := 72.0
+	maxGraphWidth := uint(53)
+	maxNameLen := 0
+	maxChangeLen := 0
+
+	scaleLinear := func(it, width, max uint) uint {
+		if it == 0 || max == 0 {
+			return 0
+		}
+
+		return 1 + (it * (width - 1) / max)
+	}

-	// Get the longest filename and longest total change.
-	var longestLength float64
-	var longestTotalChange float64
 	for _, fs := range fileStats {
-		if int(longestLength) < len(fs.Name) {
-			longestLength = float64(len(fs.Name))
+		if len(fs.Name) > maxNameLen {
+			maxNameLen = len(fs.Name)
 		}
-		totalChange := fs.Addition + fs.Deletion
-		if int(longestTotalChange) < totalChange {
-			longestTotalChange = float64(totalChange)
+
+		changes := strconv.Itoa(fs.Addition + fs.Deletion)
+		if len(changes) > maxChangeLen {
+			maxChangeLen = len(changes)
 		}
 	}

-	// Parts of the output:
-	// <pad><filename><pad>|<pad><changeNumber><pad><+++/---><newline>
-	// example: " main.go | 10 +++++++--- "
-
-	// <pad><filename><pad>
-	leftTextLength := padLength + longestLength + padLength
-
-	// <pad><number><pad><+++++/-----><newline>
-	// Excluding number length here.
-	rightTextLength := padLength + padLength + newlineLength
-
-	totalTextArea := leftTextLength + separatorLength + rightTextLength
-	heightOfHistogram := lineLength - totalTextArea
-
-	// Scale the histogram.
-	var scaleFactor float64
-	if longestTotalChange > heightOfHistogram {
-		// Scale down to heightOfHistogram.
-		scaleFactor = longestTotalChange / heightOfHistogram
-	} else {
-		scaleFactor = 1.0
-	}
-
-	finalOutput := ""
+	result := ""
 	for _, fs := range fileStats {
-		addn := float64(fs.Addition)
-		deln := float64(fs.Deletion)
-		addc := int(math.Floor(addn/scaleFactor))
-		delc := int(math.Floor(deln/scaleFactor))
-		if addc < 0 {
-			addc = 0
-		}
-		if delc < 0 {
-			delc = 0
-		}
-		adds := strings.Repeat("+", addc)
-		dels := strings.Repeat("-", delc)
-		finalOutput += fmt.Sprintf(" %s | %d %s%s\n", fs.Name, (fs.Addition + fs.Deletion), adds, dels)
-	}
+		add := uint(fs.Addition)
+		del := uint(fs.Deletion)
+		np := maxNameLen - len(fs.Name)
+		cp := maxChangeLen - len(strconv.Itoa(fs.Addition+fs.Deletion))

-	return finalOutput
+		total := add + del
+		if total > maxGraphWidth {
+			add = scaleLinear(add, maxGraphWidth, total)
+			del = scaleLinear(del, maxGraphWidth, total)
+		}
+
+		adds := strings.Repeat("+", int(add))
+		dels := strings.Repeat("-", int(del))
+		namePad := strings.Repeat(" ", np)
+		changePad := strings.Repeat(" ", cp)
+
+		result += fmt.Sprintf(" %s%s | %s%d %s%s\n", fs.Name, namePad, changePad, total, adds, dels)
+	}
+	return result
 }

 func getFileStatsFromFilePatches(filePatches []fdiff.FilePatch) FileStats {
@@ -7,6 +7,7 @@ import (
 	"io"
 	"path"
 	"path/filepath"
+	"sort"
 	"strings"

 	"github.com/go-git/go-git/v5/plumbing"
@@ -27,6 +28,7 @@ var (
 	ErrFileNotFound      = errors.New("file not found")
 	ErrDirectoryNotFound = errors.New("directory not found")
 	ErrEntryNotFound     = errors.New("entry not found")
+	ErrEntriesNotSorted  = errors.New("entries in tree are not sorted")
 )

 // Tree is basically like a directory - it references a bunch of other trees
@@ -270,6 +272,28 @@ func (t *Tree) Decode(o plumbing.EncodedObject) (err error) {
 	return nil
 }

+type TreeEntrySorter []TreeEntry
+
+func (s TreeEntrySorter) Len() int {
+	return len(s)
+}
+
+func (s TreeEntrySorter) Less(i, j int) bool {
+	name1 := s[i].Name
+	name2 := s[j].Name
+	if s[i].Mode == filemode.Dir {
+		name1 += "/"
+	}
+	if s[j].Mode == filemode.Dir {
+		name2 += "/"
+	}
+	return name1 < name2
+}
+
+func (s TreeEntrySorter) Swap(i, j int) {
+	s[i], s[j] = s[j], s[i]
+}
+
 // Encode transforms a Tree into a plumbing.EncodedObject.
 func (t *Tree) Encode(o plumbing.EncodedObject) (err error) {
 	o.SetType(plumbing.TreeObject)
@@ -279,7 +303,15 @@ func (t *Tree) Encode(o plumbing.EncodedObject) (err error) {
 	}

 	defer ioutil.CheckClose(w, &err)
+
+	if !sort.IsSorted(TreeEntrySorter(t.Entries)) {
+		return ErrEntriesNotSorted
+	}
+
 	for _, entry := range t.Entries {
+		if strings.IndexByte(entry.Name, 0) != -1 {
+			return fmt.Errorf("malformed filename %q", entry.Name)
+		}
 		if _, err = fmt.Fprintf(w, "%o %s", entry.Mode, entry.Name); err != nil {
 			return err
 		}
@@ -88,7 +88,9 @@ func (t *treeNoder) Children() ([]noder.Noder, error) {
 		}
 	}

-	return transformChildren(parent)
+	var err error
+	t.children, err = transformChildren(parent)
+	return t.children, err
 }

 // Returns the children of a tree as treenoders.
@@ -91,9 +91,9 @@ func advertisedReferences(ctx context.Context, s *session, serviceName string) (
 }

 type client struct {
-	c          *http.Client
+	client     *http.Client
 	transports *lru.Cache
-	m          sync.RWMutex
+	mutex      sync.RWMutex
 }

 // ClientOptions holds user configurable options for the client.
@@ -147,7 +147,7 @@ func NewClientWithOptions(c *http.Client, opts *ClientOptions) transport.Transpo
 		}
 	}
 	cl := &client{
-		c: c,
+		client: c,
 	}

 	if opts != nil {
@@ -234,10 +234,10 @@ func newSession(c *client, ep *transport.Endpoint, auth transport.AuthMethod) (*
 		// if the client wasn't configured to have a cache for transports then just configure
 		// the transport and use it directly, otherwise try to use the cache.
 		if c.transports == nil {
-			tr, ok := c.c.Transport.(*http.Transport)
+			tr, ok := c.client.Transport.(*http.Transport)
 			if !ok {
 				return nil, fmt.Errorf("expected underlying client transport to be of type: %s; got: %s",
-					reflect.TypeOf(transport), reflect.TypeOf(c.c.Transport))
+					reflect.TypeOf(transport), reflect.TypeOf(c.client.Transport))
 			}

 			transport = tr.Clone()
@@ -258,7 +258,7 @@ func newSession(c *client, ep *transport.Endpoint, auth transport.AuthMethod) (*
 			transport, found = c.fetchTransport(transportOpts)

 			if !found {
-				transport = c.c.Transport.(*http.Transport).Clone()
+				transport = c.client.Transport.(*http.Transport).Clone()
 				configureTransport(transport, ep)
 				c.addTransport(transportOpts, transport)
 			}
@@ -266,12 +266,12 @@ func newSession(c *client, ep *transport.Endpoint, auth transport.AuthMethod) (*

 		httpClient = &http.Client{
 			Transport:     transport,
-			CheckRedirect: c.c.CheckRedirect,
-			Jar:           c.c.Jar,
-			Timeout:       c.c.Timeout,
+			CheckRedirect: c.client.CheckRedirect,
+			Jar:           c.client.Jar,
+			Timeout:       c.client.Timeout,
 		}
 	} else {
-		httpClient = c.c
+		httpClient = c.client
 	}

 	s := &session{
--- a/Show More
+++ b/Show More