replace deprecated src-d/go-git with the new mained: go-git/go-git

.licensed.yml

@@ -46,6 +46,17 @@ reviewed:
     - golang.org/x/crypto/blake2b
     - golang.org/x/crypto/sha3
     - github.com/russross/blackfriday/v2
+    - github.com/go-git/gcfg
+    - github.com/go-git/gcfg/scanner
+    - github.com/go-git/gcfg/token
+    - github.com/go-git/gcfg/types
+    - golang.org/x/crypto/openpgp
+    - golang.org/x/crypto/openpgp/armor
+    - golang.org/x/crypto/openpgp/elgamal
+    - golang.org/x/crypto/openpgp/errors
+    - golang.org/x/crypto/openpgp/packet
+    - golang.org/x/crypto/openpgp/s2k
+    - golang.org/x/sys/execabs
 
 # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-dependencies/GPL-3.0/.licensed.yml
 allowed:

.licenses/go/github.com/cyphar/filepath-securejoin.dep.yml

@@ -0,0 +1,44 @@
+---
+name: github.com/cyphar/filepath-securejoin
+version: v0.2.4
+type: go
+summary: Package securejoin is an implementation of the hopefully-soon-to-be-included
+  SecureJoin helper that is meant to be part of the "path/filepath" package.
+homepage: https://pkg.go.dev/github.com/cyphar/filepath-securejoin
+license: bsd-3-clause
+licenses:
+- sources: LICENSE
+  text: |
+    Copyright (C) 2014-2015 Docker Inc & Go Authors. All rights reserved.
+    Copyright (C) 2017 SUSE LLC. All rights reserved.
+
+    Redistribution and use in source and binary forms, with or without
+    modification, are permitted provided that the following conditions are
+    met:
+
+       * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+       * Redistributions in binary form must reproduce the above
+    copyright notice, this list of conditions and the following disclaimer
+    in the documentation and/or other materials provided with the
+    distribution.
+       * Neither the name of Google Inc. nor the names of its
+    contributors may be used to endorse or promote products derived from
+    this software without specific prior written permission.
+
+    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+    A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+    OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+    DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+- sources: README.md
+  text: |-
+    The license of this project is the same as Go, which is a BSD 3-clause license
+    available in the `LICENSE` file.
+notices: []

.licenses/go/github.com/emirpasic/gods/containers.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/containers
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package containers provides core interfaces and functions for data structures.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/containers
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/lists.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/lists
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package lists provides an abstract List interface.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/lists
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/lists/arraylist.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/lists/arraylist
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package arraylist implements the array list.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/lists/arraylist
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/trees.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/trees
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package trees provides an abstract Tree interface.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/trees
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/trees/binaryheap.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/trees/binaryheap
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package binaryheap implements a binary heap backed by array list.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/trees/binaryheap
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/utils.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/utils
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package utils provides common utility functions.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/utils
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/src-d/gcfg.dep.yml → .licenses/go/github.com/go-git/gcfg.dep.yml

@@ -1,11 +1,11 @@
 ---
-name: github.com/src-d/gcfg
-version: v1.4.0
+name: github.com/go-git/gcfg
+version: v1.5.1-0.20230307220236-3a3c6141e376
 type: go
 summary: Package gcfg reads "INI-style" text-based configuration files with "name=value"
   pairs grouped into sections (gcfg files).
-homepage: https://pkg.go.dev/github.com/src-d/gcfg
-license: bsd-3-clause
+homepage: https://pkg.go.dev/github.com/go-git/gcfg
+license: other
 licenses:
 - sources: LICENSE
   text: |

.licenses/go/github.com/src-d/gcfg/scanner.dep.yml → .licenses/go/github.com/go-git/gcfg/scanner.dep.yml

@@ -1,12 +1,12 @@
 ---
-name: github.com/src-d/gcfg/scanner
-version: v1.4.0
+name: github.com/go-git/gcfg/scanner
+version: v1.5.1-0.20230307220236-3a3c6141e376
 type: go
 summary: Package scanner implements a scanner for gcfg configuration text.
-homepage: https://pkg.go.dev/github.com/src-d/gcfg/scanner
-license: bsd-3-clause
+homepage: https://pkg.go.dev/github.com/go-git/gcfg/scanner
+license: other
 licenses:
-- sources: gcfg@v1.4.0/LICENSE
+- sources: gcfg@v1.5.1-0.20230307220236-3a3c6141e376/LICENSE
   text: |
     Copyright (c) 2012 Péter Surányi. Portions Copyright (c) 2009 The Go
     Authors. All rights reserved.

.licenses/go/github.com/src-d/gcfg/token.dep.yml → .licenses/go/github.com/go-git/gcfg/token.dep.yml

@@ -1,13 +1,13 @@
 ---
-name: github.com/src-d/gcfg/token
-version: v1.4.0
+name: github.com/go-git/gcfg/token
+version: v1.5.1-0.20230307220236-3a3c6141e376
 type: go
 summary: Package token defines constants representing the lexical tokens of the gcfg
   configuration syntax and basic operations on tokens (printing, predicates).
-homepage: https://pkg.go.dev/github.com/src-d/gcfg/token
-license: bsd-3-clause
+homepage: https://pkg.go.dev/github.com/go-git/gcfg/token
+license: other
 licenses:
-- sources: gcfg@v1.4.0/LICENSE
+- sources: gcfg@v1.5.1-0.20230307220236-3a3c6141e376/LICENSE
   text: |
     Copyright (c) 2012 Péter Surányi. Portions Copyright (c) 2009 The Go
     Authors. All rights reserved.

.licenses/go/github.com/src-d/gcfg/types.dep.yml → .licenses/go/github.com/go-git/gcfg/types.dep.yml

@@ -1,12 +1,12 @@
 ---
-name: github.com/src-d/gcfg/types
-version: v1.4.0
+name: github.com/go-git/gcfg/types
+version: v1.5.1-0.20230307220236-3a3c6141e376
 type: go
 summary: Package types defines helpers for type conversions.
-homepage: https://pkg.go.dev/github.com/src-d/gcfg/types
-license: bsd-3-clause
+homepage: https://pkg.go.dev/github.com/go-git/gcfg/types
+license: other
 licenses:
-- sources: gcfg@v1.4.0/LICENSE
+- sources: gcfg@v1.5.1-0.20230307220236-3a3c6141e376/LICENSE
   text: |
     Copyright (c) 2012 Péter Surányi. Portions Copyright (c) 2009 The Go
     Authors. All rights reserved.

.licenses/go/gopkg.in/src-d/go-billy.v4.dep.yml → .licenses/go/github.com/go-git/go-billy/v5.dep.yml

@@ -1,9 +1,9 @@
 ---
-name: gopkg.in/src-d/go-billy.v4
-version: v4.3.2
+name: github.com/go-git/go-billy/v5
+version: v5.5.0
 type: go
 summary: 
-homepage: https://pkg.go.dev/gopkg.in/src-d/go-billy.v4
+homepage: https://pkg.go.dev/github.com/go-git/go-billy/v5
 license: apache-2.0
 licenses:
 - sources: LICENSE

.licenses/go/gopkg.in/src-d/go-billy.v4/helper/chroot.dep.yml → .licenses/go/github.com/go-git/go-billy/v5/helper/chroot.dep.yml

@@ -1,12 +1,12 @@
 ---
-name: gopkg.in/src-d/go-billy.v4/helper/chroot
-version: v4.3.2
+name: github.com/go-git/go-billy/v5/helper/chroot
+version: v5.5.0
 type: go
 summary: 
-homepage: https://pkg.go.dev/gopkg.in/src-d/go-billy.v4/helper/chroot
+homepage: https://pkg.go.dev/github.com/go-git/go-billy/v5/helper/chroot
 license: apache-2.0
 licenses:
-- sources: [email protected]/LICENSE
+- sources: [email protected]/LICENSE
   text: |2
                                      Apache License
                                Version 2.0, January 2004
@@ -209,6 +209,6 @@ licenses:
        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
        See the License for the specific language governing permissions and
        limitations under the License.
-- sources: [email protected]/README.md
+- sources: [email protected]/README.md
   text: Apache License Version 2.0, see [LICENSE](LICENSE)
 notices: []

.licenses/go/gopkg.in/src-d/go-billy.v4/helper/polyfill.dep.yml → .licenses/go/github.com/go-git/go-billy/v5/helper/polyfill.dep.yml

@@ -1,12 +1,12 @@
 ---
-name: gopkg.in/src-d/go-billy.v4/helper/polyfill
-version: v4.3.2
+name: github.com/go-git/go-billy/v5/helper/polyfill
+version: v5.5.0
 type: go
 summary: 
-homepage: https://pkg.go.dev/gopkg.in/src-d/go-billy.v4/helper/polyfill
+homepage: https://pkg.go.dev/github.com/go-git/go-billy/v5/helper/polyfill
 license: apache-2.0
 licenses:
-- sources: [email protected]/LICENSE
+- sources: [email protected]/LICENSE
   text: |2
                                      Apache License
                                Version 2.0, January 2004
@@ -209,6 +209,6 @@ licenses:
        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
        See the License for the specific language governing permissions and
        limitations under the License.
-- sources: [email protected]/README.md
+- sources: [email protected]/README.md
   text: Apache License Version 2.0, see [LICENSE](LICENSE)
 notices: []

.licenses/go/gopkg.in/src-d/go-billy.v4/osfs.dep.yml → .licenses/go/github.com/go-git/go-billy/v5/osfs.dep.yml

@@ -1,12 +1,12 @@
 ---
-name: gopkg.in/src-d/go-billy.v4/osfs
-version: v4.3.2
+name: github.com/go-git/go-billy/v5/osfs
+version: v5.5.0
 type: go
 summary: Package osfs provides a billy filesystem for the OS.
-homepage: https://pkg.go.dev/gopkg.in/src-d/go-billy.v4/osfs
+homepage: https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs
 license: apache-2.0
 licenses:
-- sources: [email protected]/LICENSE
+- sources: [email protected]/LICENSE
   text: |2
                                      Apache License
                                Version 2.0, January 2004
@@ -209,6 +209,6 @@ licenses:
        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
        See the License for the specific language governing permissions and
        limitations under the License.
-- sources: [email protected]/README.md
+- sources: [email protected]/README.md
   text: Apache License Version 2.0, see [LICENSE](LICENSE)
 notices: []

.licenses/go/gopkg.in/src-d/go-billy.v4/util.dep.yml → .licenses/go/github.com/go-git/go-billy/v5/util.dep.yml

@@ -1,12 +1,12 @@
 ---
-name: gopkg.in/src-d/go-billy.v4/util
-version: v4.3.2
+name: github.com/go-git/go-billy/v5/util
+version: v5.5.0
 type: go
 summary: 
-homepage: https://pkg.go.dev/gopkg.in/src-d/go-billy.v4/util
+homepage: https://pkg.go.dev/github.com/go-git/go-billy/v5/util
 license: apache-2.0
 licenses:
-- sources: [email protected]/LICENSE
+- sources: [email protected]/LICENSE
   text: |2
                                      Apache License
                                Version 2.0, January 2004
@@ -209,6 +209,6 @@ licenses:
        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
        See the License for the specific language governing permissions and
        limitations under the License.
-- sources: [email protected]/README.md
+- sources: [email protected]/README.md
   text: Apache License Version 2.0, see [LICENSE](LICENSE)
 notices: []