From 5d2d757991747f6321c689752f7513270d49f8ec Mon Sep 17 00:00:00 2001
From: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
Date: Sat, 11 Jan 2025 04:52:31 +0000
Subject: [PATCH 1/2] lazygit/0.45.0 package update

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
---
 lazygit.yaml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/lazygit.yaml b/lazygit.yaml
index 112aadbc58a..fd7f453fbab 100644
--- a/lazygit.yaml
+++ b/lazygit.yaml
@@ -1,7 +1,7 @@
 package:
   name: lazygit
-  version: 0.44.1
-  epoch: 3
+  version: "0.45.0"
+  epoch: 0
   description: simple terminal UI for git commands
   copyright:
     - license: MIT
@@ -20,11 +20,10 @@ pipeline:
     with:
       repository: https://github.com/jesseduffield/lazygit
       tag: v${{package.version}}
-      expected-commit: 611fabde11d24d9acc71ee26077b9a1101f59f27
+      expected-commit: 91cb1ff29a01fdf643ccc38b97fd816b2a097bec
 
   - uses: go/bump
     with:
-      deps: golang.org/x/crypto@v0.31.0 golang.org/x/net@v0.33.0
       replaces: golang.org/x/net=golang.org/x/net@v0.33.0
 
   - uses: go/build

From cb75cbea2713e4741c4e76bb71a9c89f5847cfc2 Mon Sep 17 00:00:00 2001
From: kranurag7 <81210977+kranurag7@users.noreply.github.com>
Date: Sat, 11 Jan 2025 05:59:17 +0000
Subject: [PATCH 2/2] remove go/bump and build time deps

remove go/bump because CVEs are addressed in this release.
removing build time deps as well because go/build already pulls in the
necessary build time dependencies.

Signed-off-by: kranurag7 <81210977+kranurag7@users.noreply.github.com>
---
 lazygit.yaml | 13 -------------
 1 file changed, 13 deletions(-)

diff --git a/lazygit.yaml b/lazygit.yaml
index fd7f453fbab..2e1225bfad5 100644
--- a/lazygit.yaml
+++ b/lazygit.yaml
@@ -6,15 +6,6 @@ package:
   copyright:
     - license: MIT
 
-environment:
-  contents:
-    packages:
-      - busybox
-      - ca-certificates-bundle
-      - go
-  environment:
-    CGO_ENABLED: "0"
-
 pipeline:
   - uses: git-checkout
     with:
@@ -22,10 +13,6 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: 91cb1ff29a01fdf643ccc38b97fd816b2a097bec
 
-  - uses: go/bump
-    with:
-      replaces: golang.org/x/net=golang.org/x/net@v0.33.0
-
   - uses: go/build
     with:
       packages: .