Fix Go dependency warnings (#3713)

go.mod

@@ -3,6 +3,7 @@ module github.com/rilldata/rill
 go 1.21
 
 require (
+ cloud.google.com/go/bigquery v1.57.1
  cloud.google.com/go/storage v1.31.0
  github.com/AlecAivazis/survey/v2 v2.3.6
  github.com/Andrew-M-C/go.jsonvalue v1.3.4
@@ -12,12 +13,16 @@ require (
  github.com/Masterminds/sprig/v3 v3.2.3
  github.com/MicahParks/keyfunc v1.9.0
  github.com/NYTimes/gziphandler v1.1.1
- github.com/XSAM/otelsql v0.26.0
+ github.com/XSAM/otelsql v0.27.0
  github.com/alicebob/miniredis v2.5.0+incompatible
  github.com/apache/arrow/go/v14 v14.0.1
- github.com/apache/calcite-avatica-go/v5 v5.2.0
+ github.com/apache/calcite-avatica-go/v5 v5.3.0
  github.com/aws/aws-sdk-go v1.44.314
+ github.com/aws/aws-sdk-go-v2 v1.21.0
+ github.com/aws/aws-sdk-go-v2/config v1.18.32
+ github.com/aws/aws-sdk-go-v2/credentials v1.13.31
  github.com/aws/aws-sdk-go-v2/service/athena v1.31.6
+ github.com/aws/aws-sdk-go-v2/service/s3 v1.38.1
  github.com/benbjohnson/clock v1.3.5
  github.com/bmatcuk/doublestar/v4 v4.6.0
  github.com/bradleyfalzon/ghinstallation/v2 v2.4.0
@@ -29,7 +34,9 @@ require (
  github.com/eapache/go-resiliency v1.3.0
  github.com/envoyproxy/protoc-gen-validate v1.0.2
  github.com/fatih/color v1.15.0
+ github.com/fsnotify/fsnotify v1.7.0
  github.com/go-git/go-git/v5 v5.7.0
+ github.com/go-jose/go-jose/v3 v3.0.1
  github.com/go-logr/zapr v1.2.4
  github.com/go-playground/validator/v10 v10.14.0
  github.com/go-redis/redis_rate/v10 v10.0.1
@@ -54,12 +61,13 @@ require (
  github.com/mitchellh/mapstructure v1.5.0
  github.com/prometheus/client_golang v1.17.0
  github.com/redis/go-redis/v9 v9.0.2
+ github.com/robfig/cron/v3 v3.0.1
  github.com/rs/cors v1.9.0
  github.com/snowflakedb/gosnowflake v1.7.0
  github.com/spf13/cobra v1.7.0
  github.com/spf13/pflag v1.0.5
  github.com/stretchr/testify v1.8.4
- github.com/testcontainers/testcontainers-go v0.19.0
+ github.com/testcontainers/testcontainers-go v0.26.0
  github.com/xuri/excelize/v2 v2.7.1
  go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1
  go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1
@@ -82,59 +90,41 @@ require (
  golang.org/x/sync v0.4.0
  golang.org/x/sys v0.15.0
  google.golang.org/api v0.149.0
+ google.golang.org/genproto/googleapis/api v0.0.0-20231212172506-995d672761c0
  google.golang.org/grpc v1.60.0
  google.golang.org/protobuf v1.31.0
  gopkg.in/natefinch/lumberjack.v2 v2.2.1
- gopkg.in/square/go-jose.v2 v2.6.0
  gopkg.in/yaml.v2 v2.4.0
  gopkg.in/yaml.v3 v3.0.1
  modernc.org/sqlite v1.22.1
  moul.io/zapfilter v1.7.0
 )
 
 require (
+ cloud.google.com/go v0.110.10 // indirect
+ cloud.google.com/go/compute v1.23.3 // indirect
+ cloud.google.com/go/compute/metadata v0.2.3 // indirect
+ cloud.google.com/go/iam v1.1.5 // indirect
+ dario.cat/mergo v1.0.0 // indirect
  github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 // indirect
  github.com/99designs/keyring v1.2.2 // indirect
  github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 // indirect
+ github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
  github.com/Azure/go-autorest v14.2.0+incompatible // indirect
  github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
  github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0 // indirect
- github.com/apache/arrow/go/v12 v12.0.0 // indirect
- github.com/danieljoos/wincred v1.1.2 // indirect
- github.com/distribution/reference v0.5.0 // indirect
- github.com/dvsekhvalnov/jose2go v1.5.0 // indirect
- github.com/form3tech-oss/jwt-go v3.2.5+incompatible // indirect
- github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
- github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
- github.com/jackc/pgtype v1.12.0 // indirect
- github.com/jackc/puddle/v2 v2.2.1 // indirect
- github.com/kylelemons/godebug v1.1.0 // indirect
- github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
- github.com/mtibben/percent v0.2.1 // indirect
- github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
- google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 // indirect
-)
-
-require (
- cloud.google.com/go v0.110.10 // indirect
- cloud.google.com/go/bigquery v1.57.1
- cloud.google.com/go/compute v1.23.3 // indirect
- cloud.google.com/go/compute/metadata v0.2.3 // indirect
- cloud.google.com/go/iam v1.1.5 // indirect
- github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
  github.com/JohnCGriffin/overflow v0.0.0-20211019200055-46fa312c352c // indirect
  github.com/Masterminds/goutils v1.1.1 // indirect
  github.com/Masterminds/semver/v3 v3.2.1 // indirect
  github.com/Microsoft/go-winio v0.6.1 // indirect
+ github.com/Microsoft/hcsshim v0.11.1 // indirect
  github.com/ProtonMail/go-crypto v0.0.0-20230518184743-7afd39499903 // indirect
  github.com/acomagu/bufpipe v1.0.4 // indirect
  github.com/alicebob/gopher-json v0.0.0-20230218143504-906a9b012302 // indirect
  github.com/andybalholm/brotli v1.0.5 // indirect
+ github.com/apache/arrow/go/v12 v12.0.0 // indirect
  github.com/apache/thrift v0.18.1 // indirect
- github.com/aws/aws-sdk-go-v2 v1.21.0
  github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.11 // indirect
- github.com/aws/aws-sdk-go-v2/config v1.18.32
- github.com/aws/aws-sdk-go-v2/credentials v1.13.31
  github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 // indirect
  github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.76 // indirect
  github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.41 // indirect
@@ -145,7 +135,6 @@ require (
  github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.32 // indirect
  github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.31 // indirect
  github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.15.0 // indirect
- github.com/aws/aws-sdk-go-v2/service/s3 v1.38.1
  github.com/aws/aws-sdk-go-v2/service/sso v1.13.1 // indirect
  github.com/aws/aws-sdk-go-v2/service/ssooidc v1.15.1 // indirect
  github.com/aws/aws-sdk-go-v2/service/sts v1.21.1 // indirect
@@ -154,27 +143,32 @@ require (
  github.com/cenkalti/backoff/v4 v4.2.1 // indirect
  github.com/cespare/xxhash/v2 v2.2.0 // indirect
  github.com/cloudflare/circl v1.3.3 // indirect
- github.com/containerd/containerd v1.7.0 // indirect
+ github.com/containerd/containerd v1.7.7 // indirect
+ github.com/containerd/log v0.1.0 // indirect
  github.com/cpuguy83/dockercfg v0.3.1 // indirect
+ github.com/danieljoos/wincred v1.1.2 // indirect
  github.com/davecgh/go-spew v1.1.1 // indirect
  github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
+ github.com/distribution/reference v0.5.0 // indirect
  github.com/docker/distribution v2.8.3+incompatible // indirect
- github.com/docker/docker v23.0.5+incompatible // indirect
+ github.com/docker/docker v24.0.7+incompatible // indirect
  github.com/docker/go-connections v0.4.0 // indirect
  github.com/docker/go-units v0.5.0 // indirect
  github.com/dustin/go-humanize v1.0.1 // indirect
+ github.com/dvsekhvalnov/jose2go v1.5.0 // indirect
  github.com/emirpasic/gods v1.18.1 // indirect
  github.com/felixge/httpsnoop v1.0.4 // indirect
- github.com/fsnotify/fsnotify v1.7.0
+ github.com/form3tech-oss/jwt-go v3.2.5+incompatible // indirect
  github.com/gabriel-vasile/mimetype v1.4.2 // indirect
  github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
  github.com/go-git/go-billy/v5 v5.4.1 // indirect
- github.com/go-jose/go-jose/v3 v3.0.0 // indirect
  github.com/go-logr/logr v1.3.0 // indirect
  github.com/go-logr/stdr v1.2.2 // indirect
+ github.com/go-ole/go-ole v1.2.6 // indirect
  github.com/go-playground/locales v0.14.1 // indirect
  github.com/go-playground/universal-translator v0.18.1 // indirect
  github.com/goccy/go-json v0.10.2 // indirect
+ github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
  github.com/gogo/protobuf v1.3.2 // indirect
  github.com/golang/glog v1.1.2 // indirect
  github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
@@ -188,6 +182,7 @@ require (
  github.com/google/wire v0.5.0 // indirect
  github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
  github.com/googleapis/gax-go/v2 v2.12.0 // indirect
+ github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
  github.com/hashicorp/go-uuid v1.0.3 // indirect
  github.com/huandu/xstrings v1.4.0 // indirect
  github.com/icholy/digest v0.1.22 // indirect
@@ -198,6 +193,8 @@ require (
  github.com/jackc/pgpassfile v1.0.0 // indirect
  github.com/jackc/pgproto3/v2 v2.3.2 // indirect
  github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
+ github.com/jackc/pgtype v1.12.0 // indirect
+ github.com/jackc/puddle/v2 v2.2.1 // indirect
  github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
  github.com/jcmturner/aescts/v2 v2.0.0 // indirect
  github.com/jcmturner/dnsutils/v2 v2.0.0 // indirect
@@ -212,46 +209,56 @@ require (
  github.com/klauspost/asmfmt v1.3.2 // indirect
  github.com/klauspost/compress v1.16.7 // indirect
  github.com/klauspost/cpuid/v2 v2.2.5 // indirect
+ github.com/kylelemons/godebug v1.1.0 // indirect
  github.com/leodido/go-urn v1.2.4 // indirect
+ github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
  github.com/magiconair/properties v1.8.7 // indirect
  github.com/mattn/go-colorable v0.1.13 // indirect
  github.com/mattn/go-isatty v0.0.19 // indirect
  github.com/mattn/go-runewidth v0.0.14 // indirect
  github.com/mattn/go-sqlite3 v2.0.3+incompatible // indirect
+ github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
  github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
  github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8 // indirect
  github.com/minio/c2goasm v0.0.0-20190812172519-36a3d3bbc4f3 // indirect
  github.com/mitchellh/copystructure v1.2.0 // indirect
  github.com/mitchellh/reflectwalk v1.0.2 // indirect
- github.com/moby/patternmatcher v0.5.0 // indirect
+ github.com/moby/patternmatcher v0.6.0 // indirect
  github.com/moby/sys/sequential v0.5.0 // indirect
- github.com/moby/term v0.0.0-20230430223545-0564e01cfe5d // indirect
+ github.com/moby/term v0.5.0 // indirect
  github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect
  github.com/morikuni/aec v1.0.0 // indirect
+ github.com/mtibben/percent v0.2.1 // indirect
  github.com/opencontainers/go-digest v1.0.0 // indirect
- github.com/opencontainers/image-spec v1.1.0-rc3 // indirect
+ github.com/opencontainers/image-spec v1.1.0-rc5 // indirect
  github.com/opencontainers/runc v1.1.7 // indirect
  github.com/pierrec/lz4/v4 v4.1.18 // indirect
  github.com/pjbgf/sha1cd v0.3.0 // indirect
+ github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
  github.com/pkg/errors v0.9.1 // indirect
  github.com/pmezard/go-difflib v1.0.0 // indirect
+ github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
  github.com/prometheus/client_model v0.5.0 // indirect
  github.com/prometheus/common v0.45.0 // indirect
  github.com/prometheus/procfs v0.12.0 // indirect
  github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
  github.com/richardlehane/mscfb v1.0.4 // indirect
  github.com/richardlehane/msoleps v1.0.3 // indirect
  github.com/rivo/uniseg v0.4.4 // indirect
- github.com/robfig/cron/v3 v3.0.1
  github.com/sergi/go-diff v1.3.1 // indirect
+ github.com/shirou/gopsutil/v3 v3.23.9 // indirect
+ github.com/shoenig/go-m1cpu v0.1.6 // indirect
  github.com/shopspring/decimal v1.3.1 // indirect
- github.com/sirupsen/logrus v1.9.0 // indirect
+ github.com/sirupsen/logrus v1.9.3 // indirect
  github.com/skeema/knownhosts v1.1.1 // indirect
  github.com/spf13/cast v1.5.1 // indirect
+ github.com/tklauser/go-sysconf v0.3.12 // indirect
+ github.com/tklauser/numcpus v0.6.1 // indirect
  github.com/xanzy/ssh-agent v0.3.3 // indirect
  github.com/xuri/efp v0.0.0-20220603152613-6918739fd470 // indirect
  github.com/xuri/nfp v0.0.0-20220409054826-5e722a1d9e22 // indirect
  github.com/yuin/gopher-lua v1.1.0 // indirect
+ github.com/yusufpapurcu/wmi v1.2.3 // indirect
  github.com/zeebo/xxh3 v1.0.2 // indirect
  go.opencensus.io v0.24.0 // indirect
  go.opentelemetry.io/proto/otlp v1.0.0 // indirect
@@ -263,7 +270,7 @@ require (
  golang.org/x/tools v0.14.0 // indirect
  golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
  google.golang.org/appengine v1.6.8 // indirect
- google.golang.org/genproto/googleapis/api v0.0.0-20231212172506-995d672761c0
+ google.golang.org/genproto v0.0.0-20231211222908-989df2bf70f3 // indirect
  google.golang.org/genproto/googleapis/rpc v0.0.0-20231212172506-995d672761c0 // indirect
  gopkg.in/warnings.v0 v0.1.2 // indirect
  lukechampine.com/uint128 v1.3.0 // indirect
@@ -277,8 +284,6 @@ require (
  modernc.org/token v1.1.0 // indirect
 )
 
-replace github.com/apache/calcite-avatica-go/v5 v5.2.0 => github.com/rilldata/calcite-avatica-go/v5 v5.0.0-20231129075938-4645f00ea1f7
-
 // using a patch with changes to support decimal256
 // revert to original SDK on next duckDB release
 replace github.com/marcboeker/go-duckdb v1.5.4 => github.com/rilldata/go-duckdb v0.0.0-20231208152512-5e40f2025fc4
@@ -287,7 +292,7 @@ replace github.com/marcboeker/go-duckdb v1.5.4 => github.com/rilldata/go-duckdb
 // revert to original SDK once this PR is merged : https:/snowflakedb/gosnowflake/pull/977
 replace github.com/snowflakedb/gosnowflake v1.7.0 => github.com/esevastyanov/gosnowflake v0.0.0-20231129090721-012eca4e3448
 
-exclude modernc.org/sqlite v1.18.1
+// Fixes a security warning. Remove when testcontainers-go v0.27.0 is released.
+replace github.com/testcontainers/testcontainers-go v0.26.0 => github.com/testcontainers/testcontainers-go v0.26.1-0.20231102155908-6aac7412c81a
 
-// revert to original SDK once this PR is merged and released : https:/XSAM/otelsql/pull/199
-replace github.com/XSAM/otelsql v0.26.0 => github.com/rilldata/otelsql v0.0.0-20231213102114-31132d178f10
+exclude modernc.org/sqlite v1.18.1