vendor: bump containers/(storage, common, buildah, image)

Bump containers/(storage, common, buildah and image)

Changes since 2023-01-01:
 - skip mount-cache-selinux-long-name test under remote, with
   a FIXME requesting that someone see if it can be made to work.

 - skip six tests that fail under rootless-remote

 - add new --build-arg-file option:
 - update man page

Squash of:
* cf56eb1865
* 561f082772

Signed-off-by: Ed Santiago <santiago@redhat.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Signed-off-by: Aditya R <arajan@redhat.com>

vendor/github.com/google/trillian/.gitignore

@@ -22,3 +22,4 @@
 /trillian_log_signer
 /trillian_map_server
 default.etcd
+cockroach-data/

vendor/github.com/google/trillian/.golangci.yaml

@@ -18,7 +18,6 @@ linters-settings:
 linters:
   disable-all: true
   enable:
-    - deadcode
     - depguard
     - gocyclo
     - gofmt
@@ -28,7 +27,7 @@ linters:
     - megacheck
     - misspell
     - revive
-    - varcheck
+    - unused
     # TODO(gbelvin): write license linter and commit to upstream.
     # ./scripts/check_license.sh is run by ./scripts/presubmit.sh
 

vendor/github.com/google/trillian/CHANGELOG.md

@@ -2,6 +2,76 @@
 
 ## HEAD
 
+## v1.5.1
+
+### Storage
+
+* A new storage driver for CockroachDB has been added. It's currently in alpha stage 
+  with support provided by Equinix Metal.
+
+### Misc
+* Fix log server not exiting properly on SIGINT
+
+### Dependency updates
+
+* Switch from glog to klog by @jdolitsky in https://github.com/google/trillian/pull/2787
+* Bump google.golang.org/api from 0.92.0 to 0.93.0 by @dependabot in https://github.com/google/trillian/pull/2800
+* Bump cloud.google.com/go/spanner from 1.36.0 to 1.37.0 by @dependabot in https://github.com/google/trillian/pull/2803
+* Bump google.golang.org/grpc from 1.48.0 to 1.49.0 by @dependabot in https://github.com/google/trillian/pull/2804
+* Bump google.golang.org/api from 0.93.0 to 0.94.0 by @dependabot in https://github.com/google/trillian/pull/2802
+* Bump cloud.google.com/go/spanner from 1.37.0 to 1.38.0 by @dependabot in https://github.com/google/trillian/pull/2806
+* Bump k8s.io/klog/v2 from 2.70.1 to 2.80.0 by @dependabot in https://github.com/google/trillian/pull/2807
+* Bump k8s.io/klog/v2 from 2.80.0 to 2.80.1 by @dependabot in https://github.com/google/trillian/pull/2808
+* Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in https://github.com/google/trillian/pull/2809
+* Bump google.golang.org/api from 0.94.0 to 0.95.0 by @dependabot in https://github.com/google/trillian/pull/2810
+* Bump go.etcd.io/etcd/etcdctl/v3 from 3.5.4 to 3.5.5 by @dependabot in https://github.com/google/trillian/pull/2812
+* Bump go.etcd.io/etcd/v3 from 3.5.4 to 3.5.5 by @dependabot in https://github.com/google/trillian/pull/2816
+* Bump google.golang.org/api from 0.95.0 to 0.96.0 by @dependabot in https://github.com/google/trillian/pull/2813
+* Bump google.golang.org/api from 0.96.0 to 0.97.0 by @dependabot in https://github.com/google/trillian/pull/2819
+* Bump cloud.google.com/go/spanner from 1.38.0 to 1.39.0 by @dependabot in https://github.com/google/trillian/pull/2818
+* Bump google.golang.org/api from 0.97.0 to 0.98.0 by @dependabot in https://github.com/google/trillian/pull/2820
+* Bump google.golang.org/grpc from 1.49.0 to 1.50.0 by @dependabot in https://github.com/google/trillian/pull/2821
+* Bump google.golang.org/grpc from 1.50.0 to 1.50.1 by @dependabot in https://github.com/google/trillian/pull/2823
+* Bump google.golang.org/api from 0.98.0 to 0.99.0 by @dependabot in https://github.com/google/trillian/pull/2822
+* Bump google.golang.org/api from 0.99.0 to 0.100.0 by @dependabot in https://github.com/google/trillian/pull/2824
+* Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2825
+* Bump golang.org/x/tools from 0.1.12 to 0.2.0 by @dependabot in https://github.com/google/trillian/pull/2826
+* Bump google.golang.org/api from 0.100.0 to 0.101.0 by @dependabot in https://github.com/google/trillian/pull/2827
+* Bump github.com/prometheus/client_golang from 1.13.0 to 1.13.1 by @dependabot in https://github.com/google/trillian/pull/2828
+* Bump golang.org/x/sys from 0.1.0 to 0.2.0 by @dependabot in https://github.com/google/trillian/pull/2829
+* Bump google.golang.org/api from 0.101.0 to 0.102.0 by @dependabot in https://github.com/google/trillian/pull/2830
+* Bump go.opencensus.io from 0.23.0 to 0.24.0 by @dependabot in https://github.com/google/trillian/pull/2832
+* Bump cloud.google.com/go/spanner from 1.39.0 to 1.40.0 by @dependabot in https://github.com/google/trillian/pull/2831
+* Bump github.com/prometheus/client_golang from 1.13.1 to 1.14.0 by @dependabot in https://github.com/google/trillian/pull/2838
+* Bump google.golang.org/api from 0.102.0 to 0.103.0 by @dependabot in https://github.com/google/trillian/pull/2839
+* Bump golang.org/x/crypto from 0.1.0 to 0.2.0 by @dependabot in https://github.com/google/trillian/pull/2841
+* Bump golang.org/x/tools from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2840
+* Dependabot: Also keep GitHub actions up-to-date by @JAORMX in https://github.com/google/trillian/pull/2842
+* Bump actions/upload-artifact from 3.1.0 to 3.1.1 by @dependabot in https://github.com/google/trillian/pull/2843
+* Bump golang.org/x/crypto from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2847
+* Bump google.golang.org/grpc from 1.50.1 to 1.51.0 by @dependabot in https://github.com/google/trillian/pull/2845
+* Bump github.com/cockroachdb/cockroach-go/v2 from 2.2.16 to 2.2.18 by @dependabot in https://github.com/google/trillian/pull/2846
+* Bump go.etcd.io/etcd/v3 from 3.5.5 to 3.5.6 by @dependabot in https://github.com/google/trillian/pull/2849
+* Bump github.com/cockroachdb/cockroach-go/v2 from 2.2.18 to 2.2.19 by @dependabot in https://github.com/google/trillian/pull/2856
+* Bump golang.org/x/sys from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2858
+* Bump cloud.google.com/go/spanner from 1.40.0 to 1.41.0 by @dependabot in https://github.com/google/trillian/pull/2857
+* Bump actions/setup-go from 3.3.1 to 3.4.0 by @dependabot in https://github.com/google/trillian/pull/2862
+* Bump github/codeql-action from 2.1.34 to 2.1.35 by @dependabot in https://github.com/google/trillian/pull/2861
+* Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 by @dependabot in https://github.com/google/trillian/pull/2860
+* Bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 by @dependabot in https://github.com/google/trillian/pull/2859
+* Bump qs, body-parser and express in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2867
+* Bump minimist from 1.2.0 to 1.2.7 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2864
+* Bump axios and @slack/webhook in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2868
+* Bump json-bigint and google-auth-library in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2869
+* Bump node-fetch from 2.6.0 to 2.6.7 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2866
+* Bump golang.org/x/tools from 0.3.0 to 0.4.0 by @dependabot in https://github.com/google/trillian/pull/2870
+* Bump github/codeql-action from 2.1.35 to 2.1.36 by @dependabot in https://github.com/google/trillian/pull/2874
+* Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in https://github.com/google/trillian/pull/2873
+* Bump golang.org/x/crypto from 0.3.0 to 0.4.0 by @dependabot in https://github.com/google/trillian/pull/2872
+* Bump google.golang.org/api from 0.103.0 to 0.104.0 by @dependabot in https://github.com/google/trillian/pull/2871
+* Bump cloud.google.com/go/spanner from 1.41.0 to 1.42.0 by @dependabot in https://github.com/google/trillian/pull/2877
+
+
 ## v.1.5.0
 
 ### Storage

vendor/github.com/google/trillian/README.md

@@ -59,10 +59,14 @@ Other examples of Trillian personalities are available in the
 
 ## Using the Code
 
-**WARNING**: The Trillian codebase is still under development, but the Log mode
-is now being used in production by several organizations. We will try to avoid
-any further incompatible code and schema changes but cannot guarantee that they
-will never be necessary.
+The Trillian codebase is stable and is used in production by multiple
+organizations, including many large-scale 
+[Certificate Transparency](https://certificate.transparency.dev) log
+operators.
+
+Given this, we do not plan to add any new features to this version of Trillian,
+and will try to avoid any further incompatible code and schema changes but
+cannot guarantee that they will never be necessary.
 
 The current state of feature implementation is recorded in the
 [Feature implementation matrix](docs/Feature_Implementation_Matrix.md).

vendor/github.com/google/trillian/gen.go

@@ -12,6 +12,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
+// Package trillian contains the generated protobuf code for the Trillian API.
 package trillian
 
 //go:generate protoc -I=. -I=third_party/googleapis --go_out=paths=source_relative:. --go-grpc_out=paths=source_relative:. --go-grpc_opt=require_unimplemented_servers=false trillian_log_api.proto trillian_admin_api.proto trillian.proto --doc_out=markdown,api.md:./docs/

vendor/github.com/google/trillian/trillian.pb.go

@@ -446,6 +446,12 @@ func (x *Tree) GetDeleteTime() *timestamppb.Timestamp {
 }
 
 // SignedLogRoot represents a commitment by a Log to a particular tree.
+//
+// Note that the signature itself is no-longer provided by Trillian since
+// https://github.com/google/trillian/pull/2452 .
+// This functionality was intended to support a niche-use case but added
+// significant complexity and was prone to causing confusion and
+// misunderstanding for personality authors.
 type SignedLogRoot struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache

vendor/github.com/google/trillian/trillian.proto

@@ -174,6 +174,12 @@ message Tree {
 }
 
 // SignedLogRoot represents a commitment by a Log to a particular tree.
+// 
+// Note that the signature itself is no-longer provided by Trillian since
+// https://github.com/google/trillian/pull/2452 .
+// This functionality was intended to support a niche-use case but added
+// significant complexity and was prone to causing confusion and
+// misunderstanding for personality authors. 
 message SignedLogRoot {
   // log_root holds the TLS-serialization of the following structure (described
   // in RFC5246 notation):

vendor/github.com/google/trillian/trillian_log_api.proto

@@ -82,7 +82,7 @@ service TrillianLog {
   rpc GetConsistencyProof(GetConsistencyProofRequest)
       returns (GetConsistencyProofResponse) {}
 
-  // GetLatestSignedLogRoot returns the latest signed log root for a given tree,
+  // GetLatestSignedLogRoot returns the latest log root for a given tree,
   // and optionally also includes a consistency proof from an earlier tree size
   // to the new size of the tree.
   //

vendor/github.com/google/trillian/trillian_log_api_grpc.pb.go

@@ -43,7 +43,7 @@ type TrillianLogClient interface {
 	// If the requested tree size is larger than the server is aware of,
 	// the response will include the latest known log root and an empty proof.
 	GetConsistencyProof(ctx context.Context, in *GetConsistencyProofRequest, opts ...grpc.CallOption) (*GetConsistencyProofResponse, error)
-	// GetLatestSignedLogRoot returns the latest signed log root for a given tree,
+	// GetLatestSignedLogRoot returns the latest log root for a given tree,
 	// and optionally also includes a consistency proof from an earlier tree size
 	// to the new size of the tree.
 	//
@@ -182,7 +182,7 @@ type TrillianLogServer interface {
 	// If the requested tree size is larger than the server is aware of,
 	// the response will include the latest known log root and an empty proof.
 	GetConsistencyProof(context.Context, *GetConsistencyProofRequest) (*GetConsistencyProofResponse, error)
-	// GetLatestSignedLogRoot returns the latest signed log root for a given tree,
+	// GetLatestSignedLogRoot returns the latest log root for a given tree,
 	// and optionally also includes a consistency proof from an earlier tree size
 	// to the new size of the tree.
 	//