vendor: github.com/tonistiigi/[email protected]

[austinvazquez]

This change vendors dependency updates to silence false positive warnings for CVE-2024-51744.

• github.com/tonistiigi/[email protected]
  • Drops dependency on github.com/golang-jwt/jwt/v4

[austinvazquez]

github.com/golang-jwt/jwt/v4 module is required via github.com/tonistiigi/go-actions-cache dependency. Considering alternative to update github.com/tonistiigi/go-actions-cache dependency which no longer requires github.com/golang-jwt/jwt/v4 to resolve the issue. Currently testing in fork.

[crazy-max]

• golang.org/x/[email protected] (Required for github.com/tonistiigi/go-actions-cache@latest update)

Don't think we need this one: https://github.com/tonistiigi/go-actions-cache/blob/394979b8119e1ceb922c4e2a72c0ccf70ba2bdf7/go.mod#L10

Just update of go-actions-cache module should be enough

[austinvazquez]

Nice catch @crazy-max , that dependency was updated when I rev'd go-actions-cache but doesn't seem to be required.