Merge pull request #5592 from arduino/dependabot/go_modules/dot-githu…

…b/workflows/assets/validate-registry/production/github.com/arduino/libraries-repository-engine-1.1.5

Bump github.com/arduino/libraries-repository-engine from 1.1.3 to 1.1.5 in /.github/workflows/assets/validate-registry

.github/workflows/assets/validate-registry/go.mod

@@ -1,45 +1,32 @@
 module github.com/arduino/library-registry/.github/workflows/assets/validate-registry
 
-go 1.17
+go 1.23.4
 
-require github.com/arduino/libraries-repository-engine v1.1.3
+require github.com/arduino/libraries-repository-engine v1.1.5
 
 require (
-	github.com/Microsoft/go-winio v0.5.0 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20210428141323-04723f9f07d7 // indirect
-	github.com/acomagu/bufpipe v1.0.3 // indirect
-	github.com/arduino/arduino-cli v0.0.0-20210520100059-2666b6ec51e9 // indirect
-	github.com/arduino/go-paths-helper v1.7.0 // indirect
-	github.com/arduino/go-properties-orderedmap v1.3.0 // indirect
-	github.com/codeclysm/extract/v3 v3.0.2 // indirect
-	github.com/emirpasic/gods v1.12.0 // indirect
+	github.com/Microsoft/go-winio v0.5.2 // indirect
+	github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8 // indirect
+	github.com/acomagu/bufpipe v1.0.4 // indirect
+	github.com/arduino/go-paths-helper v1.12.1 // indirect
+	github.com/cloudflare/circl v1.3.7 // indirect
+	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/go-git/gcfg v1.5.0 // indirect
-	github.com/go-git/go-billy/v5 v5.3.1 // indirect
-	github.com/go-git/go-git/v5 v5.4.3-0.20220108132248-a5bbcd278ab1 // indirect
-	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/h2non/filetype v1.0.8 // indirect
-	github.com/imdario/mergo v0.3.12 // indirect
+	github.com/go-git/go-billy/v5 v5.4.1 // indirect
+	github.com/go-git/go-git/v5 v5.6.1 // indirect
+	github.com/imdario/mergo v0.3.13 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
-	github.com/juju/errors v0.0.0-20181118221551-089d3ea4e4d5 // indirect
-	github.com/kevinburke/ssh_config v0.0.0-20201106050909-4977a11b4351 // indirect
-	github.com/mitchellh/go-homedir v1.1.0 // indirect
-	github.com/pkg/errors v0.9.1 // indirect
-	github.com/pmylund/sortutil v0.0.0-20120526081524-abeda66eb583 // indirect
+	github.com/kevinburke/ssh_config v1.2.0 // indirect
+	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/sergi/go-diff v1.1.0 // indirect
-	github.com/sirupsen/logrus v1.7.0 // indirect
+	github.com/skeema/knownhosts v1.1.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/vaughan0/go-ini v0.0.0-20130923145212-a98ad7ee00ec // indirect
-	github.com/xanzy/ssh-agent v0.3.1 // indirect
-	go.bug.st/cleanup v1.0.0 // indirect
-	go.bug.st/downloader/v2 v2.1.1 // indirect
-	go.bug.st/relaxed-semver v0.9.0 // indirect
-	golang.org/x/crypto v0.0.0-20210817164053-32db794688a5 // indirect
-	golang.org/x/net v0.0.0-20210813160813-60bc85c4be6d // indirect
-	golang.org/x/sys v0.0.0-20211205182925-97ca703d548d // indirect
-	golang.org/x/text v0.3.7 // indirect
-	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
-	google.golang.org/grpc v1.42.0 // indirect
-	google.golang.org/protobuf v1.27.1 // indirect
+	github.com/xanzy/ssh-agent v0.3.3 // indirect
+	go.bug.st/relaxed-semver v0.12.0 // indirect
+	golang.org/x/crypto v0.21.0 // indirect
+	golang.org/x/net v0.23.0 // indirect
+	golang.org/x/sys v0.18.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
-	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )

.github/workflows/check-go-dependencies-task.yml

@@ -3,7 +3,7 @@ name: Check Go Dependencies
 
 env:
   # See: https://github.com/actions/setup-go/tree/main#supported-version-syntax
-  GO_VERSION: "1.17"
+  GO_VERSION: "1.23"
 
 # See: https://docs.github.com/actions/using-workflows/events-that-trigger-workflows
 on:

.github/workflows/check-go-task.yml

@@ -3,7 +3,7 @@ name: Check Go
 
 env:
   # See: https://github.com/actions/setup-go/tree/main#supported-version-syntax
-  GO_VERSION: "1.17"
+  GO_VERSION: "1.23"
 
 # See: https://docs.github.com/en/actions/reference/events-that-trigger-workflows
 on:

.github/workflows/check-registry.yml

@@ -2,7 +2,7 @@ name: Check Registry Data File
 
 env:
   # See: https://github.com/actions/setup-go/tree/main#supported-version-syntax
-  GO_VERSION: "1.17"
+  GO_VERSION: "1.23"
 
 # See: https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows
 on:

.github/workflows/test-go-integration-task.yml

@@ -3,7 +3,7 @@ name: Test Integration
 
 env:
   # See: https://github.com/actions/setup-go/tree/main#supported-version-syntax
-  GO_VERSION: "1.17"
+  GO_VERSION: "1.23"
   # See: https://github.com/actions/setup-python/tree/main#available-versions-of-python
   PYTHON_VERSION: "3.9"
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/bitcurves.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/ProtonMail/go-crypto/bitcurves
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/bitcurves
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +35,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/brainpool.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/ProtonMail/go-crypto/brainpool
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: Package brainpool implements Brainpool elliptic curves.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/brainpool
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +35,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/eax.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/eax
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: 'Package eax provides an implementation of the EAX (encrypt-authenticate-translate)
   mode of operation, as described in Bellare, Rogaway, and Wagner "THE EAX MODE OF
@@ -9,7 +9,7 @@ summary: 'Package eax provides an implementation of the EAX (encrypt-authenticat
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/eax
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -38,7 +38,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/internal/byteutil.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/ProtonMail/go-crypto/internal/byteutil
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/internal/byteutil
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +35,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/ocb.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/ocb
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: 'Package ocb provides an implementation of the OCB (offset codebook) mode
   of operation, as described in RFC-7253 of the IRTF and in Rogaway, Bellare, Black
@@ -9,7 +9,7 @@ summary: 'Package ocb provides an implementation of the OCB (offset codebook) mo
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/ocb
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -38,7 +38,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/openpgp.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: Package openpgp implements high level operations on OpenPGP messages.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +35,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/openpgp/aes/keywrap.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: Package keywrap is an implementation of the RFC 3394 AES key wrapping algorithm.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +35,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/openpgp/armor.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/armor
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: Package armor implements OpenPGP ASCII Armor, see RFC 4880.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/armor
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +35,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/github.com/ProtonMail/go-crypto/openpgp/ecdh.dep.yml

@@ -1,13 +1,13 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/ecdh
-version: v0.0.0-20210428141323-04723f9f07d7
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
 summary: Package ecdh implements ECDH encryption, suitable for OpenPGP, as specified
   in RFC 6637, section 8.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/ecdh
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210428141323-04723f9f07d7/LICENSE
+- sources: [email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -36,7 +36,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210428141323-04723f9f07d7/PATENTS
+- sources: [email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/golang.org/x/crypto/curve25519/internal/field.dep.yml → .licenses/validate-registry/go/github.com/ProtonMail/go-crypto/openpgp/ecdsa.dep.yml

@@ -1,12 +1,13 @@
 ---
-name: golang.org/x/crypto/curve25519/internal/field
-version: v0.0.0-20210817164053-32db794688a5
+name: github.com/ProtonMail/go-crypto/openpgp/ecdsa
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
-summary: Package field implements fast arithmetic modulo 2^255-19.
-homepage: https://pkg.go.dev/golang.org/x/crypto/curve25519/internal/field
+summary: Package ecdsa implements ECDSA signature, suitable for OpenPGP, as specified
+  in RFC 6637, section 5.
+homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/ecdsa
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210817164053-32db794688a5/LICENSE
+- sources: go-[email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +36,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210817164053-32db794688a5/PATENTS
+- sources: go-[email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)
 

.licenses/validate-registry/go/golang.org/x/crypto/ed25519.dep.yml → .licenses/validate-registry/go/github.com/ProtonMail/go-crypto/openpgp/eddsa.dep.yml

@@ -1,12 +1,13 @@
 ---
-name: golang.org/x/crypto/ed25519
-version: v0.0.0-20210817164053-32db794688a5
+name: github.com/ProtonMail/go-crypto/openpgp/eddsa
+version: v0.0.0-20230217124315-7d5c6f04bbb8
 type: go
-summary: Package ed25519 implements the Ed25519 signature algorithm.
-homepage: https://pkg.go.dev/golang.org/x/crypto/ed25519
+summary: Package eddsa implements EdDSA signature, suitable for OpenPGP, as specified
+  in https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-crypto-refresh-06#section-13.7
+homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/eddsa
 license: bsd-3-clause
 licenses:
-- sources: [email protected]20210817164053-32db794688a5/LICENSE
+- sources: go-[email protected]20230217124315-7d5c6f04bbb8/LICENSE
   text: |
     Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -35,7 +36,7 @@ licenses:
     THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-- sources: [email protected]20210817164053-32db794688a5/PATENTS
+- sources: go-[email protected]20230217124315-7d5c6f04bbb8/PATENTS
   text: |
     Additional IP Rights Grant (Patents)