iam-floyd 0.847.0 → 0.848.0

package/lib/shared/policy-statement/2-conditions.js

@@ -7,58 +7,18 @@ class PolicyStatementWithCondition extends _1_base_1.PolicyStatementBase {
     constructor() {
         super(...arguments);
         this.floydConditions = {};
-        this.cdkConditionsApplied = false;
-    }
-    toJSON() {
-        if (typeof this.addResources == 'function') {
-            this.cdkApplyConditions();
-            return super.toJSON();
-        }
-        const statement = super.toJSON();
-        if (this.hasConditions()) {
-            statement.Condition = this.floydConditions;
-        }
-        return statement;
-    }
-    toStatementJson() {
-        this.cdkApplyConditions();
-        return super.toStatementJson();
-    }
-    freeze() {
-        if (!this.frozen) {
-            this.cdkApplyConditions();
-        }
-        return super.freeze();
-    }
-    cdkApplyConditions() {
-        if (this.hasConditions() && !this.cdkConditionsApplied) {
-            Object.keys(this.floydConditions).forEach((operator) => {
-                Object.keys(this.floydConditions[operator]).forEach((key) => {
-                    const condition = {};
-                    condition[key] = this.floydConditions[operator][key];
-                    this.addCondition(operator, condition);
-                });
-            });
-            this.cdkConditionsApplied = true;
-        }
     }
     hasConditions() {
         return Object.keys(this.floydConditions).length > 0;
     }
     if(key, value, operator) {
-        if (this.servicePrefix.length && key.indexOf(':') < 0) {
+        if (this.servicePrefix.length && !key.includes(':')) {
             key = `${this.servicePrefix}:${key}`;
         }
         if (typeof operator === 'undefined') {
             operator = operators_1.Operator.stringLike;
         }
-        let op = '';
-        if (typeof operator === 'string') {
-            op = operator;
-        }
-        else {
-            op = operator.toString();
-        }
+        const op = typeof operator === 'string' ? operator : operator.toString();
         if (['boolean', 'number'].includes(typeof value)) {
             value = value.toString();
         }
@@ -78,18 +38,9 @@ class PolicyStatementWithCondition extends _1_base_1.PolicyStatementBase {
         return this.if('aws:CalledViaLast', value, operator);
     }
     ifAwsCurrentTime(value, operator) {
-        if (typeof value.getMonth === 'function') {
-            value = value.toISOString();
-        }
-        else if (Array.isArray(value)) {
-            value = value.map((item) => {
-                if (typeof item.getMonth === 'function') {
-                    item = item.toISOString();
-                }
-                return item;
-            });
-        }
-        return this.if('aws:CurrentTime', value, operator ?? operators_1.Operator.dateLessThanEquals);
+        return this.if('aws:CurrentTime', Array.isArray(value)
+            ? value.map((item) => dateToString(item))
+            : dateToString(value), operator ?? operators_1.Operator.dateLessThanEquals);
     }
     ifAwsEc2InstanceSourceVpc(value, operator) {
         return this.if('aws:Ec2InstanceSourceVpc', value, operator);
@@ -98,18 +49,9 @@ class PolicyStatementWithCondition extends _1_base_1.PolicyStatementBase {
         return this.if('aws:Ec2InstanceSourcePrivateIPv4', value, operator ?? operators_1.Operator.ipAddress);
     }
     ifAwsEpochTime(value, operator) {
-        if (typeof value.getMonth === 'function') {
-            value = value.toISOString();
-        }
-        else if (Array.isArray(value)) {
-            value = value.map((item) => {
-                if (typeof item.getMonth === 'function') {
-                    item = item.toISOString();
-                }
-                return item;
-            });
-        }
-        return this.if('aws:EpochTime', value, operator ?? operators_1.Operator.dateLessThanEquals);
+        return this.if('aws:EpochTime', Array.isArray(value)
+            ? value.map((item) => dateToString(item))
+            : dateToString(value), operator ?? operators_1.Operator.dateLessThanEquals);
     }
     ifAwsFederatedProvider(value, operator) {
         return this.if('aws:FederatedProvider', value, operator);
@@ -213,8 +155,5 @@ class PolicyStatementWithCondition extends _1_base_1.PolicyStatementBase {
 }
 exports.PolicyStatementWithCondition = PolicyStatementWithCondition;
 function dateToString(value) {
-    if (typeof value.getMonth === 'function') {
-        value = value.toISOString();
-    }
-    return value;
+    return value instanceof Date ? value.toISOString() : value;
 }

package/lib/shared/policy-statement/3-actions.d.ts

@@ -13,19 +13,13 @@ export interface Action {
  */
 export declare class PolicyStatementWithActions extends PolicyStatementWithCondition {
     protected accessLevelList: AccessLevelList;
-    private useNotAction;
+    protected useNotAction: boolean;
     protected floydActions: string[];
-    private cdkActionsApplied;
     private isCompact;
     /**
-     * Injects actions into the statement.
-     *
-     * Only relevant for the main package. In CDK mode this only calls super.
+     * The actions of the statement, compacted if `compact()` was called, without duplicates and sorted
      */
-    toJSON(): any;
-    toStatementJson(): any;
-    freeze(): any;
-    private cdkApplyActions;
+    protected uniqueActions(): string[];
     /**
      * Switches the statement to use [`NotAction`](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notaction.html).
      */
@@ -58,6 +52,7 @@ export declare class PolicyStatementWithActions extends PolicyStatementWithCondi
      * ```typescript
      * allMatchingActions('/vpn/i')
      * ```
+     * Of the flags, only `i` (ignore case) and `y` (match at the start of the action name) have an effect, others are ignored. Without `i`, the match is case-sensitive. A string without slashes is used as the pattern itself.
      */
     allMatchingActions(...expressions: string[]): this;
     /**
@@ -113,5 +108,8 @@ export declare class PolicyStatementWithActions extends PolicyStatementWithCondi
      * For example, all actions with access level `list` could be reduced to a small pattern `List*`.
      */
     compact(): this;
+    /**
+     * Replaces the actions of this service by wildcard patterns. Other actions, like `ec2:*` or actions of other services, are kept as they are.
+     */
     private compactActions;
 }

package/lib/shared/policy-statement/3-actions.js

@@ -1,9 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PolicyStatementWithActions = void 0;
-const common_substrings_1 = require("@udondan/common-substrings");
-const RegexParser = require("regex-parser");
 const access_level_1 = require("../access-level");
+const compact_1 = require("../compact");
 const _2_conditions_1 = require("./2-conditions");
 class PolicyStatementWithActions extends _2_conditions_1.PolicyStatementWithCondition {
     constructor() {
@@ -11,55 +10,15 @@ class PolicyStatementWithActions extends _2_conditions_1.PolicyStatementWithCond
         this.accessLevelList = {};
         this.useNotAction = false;
         this.floydActions = [];
-        this.cdkActionsApplied = false;
         this.isCompact = false;
     }
-    toJSON() {
-        if (typeof this.addResources == 'function') {
-            this.cdkApplyActions();
-            return super.toJSON();
+    uniqueActions() {
+        if (this.isCompact) {
+            this.compactActions();
         }
-        const mode = this.useNotAction ? 'NotAction' : 'Action';
-        const statement = super.toJSON();
-        const self = this;
-        if (this.hasActions()) {
-            if (this.isCompact) {
-                this.compactActions();
-            }
-            const actions = this.floydActions
-                .filter((elem, pos) => {
-                return self.floydActions.indexOf(elem) == pos;
-            })
-                .sort();
-            statement[mode] = actions.length > 1 ? actions : actions[0];
-        }
-        return statement;
-    }
-    toStatementJson() {
-        this.cdkApplyActions();
-        return super.toStatementJson();
-    }
-    freeze() {
-        if (!this.frozen) {
-            this.cdkApplyActions();
-        }
-        return super.freeze();
-    }
-    cdkApplyActions() {
-        if (!this.cdkActionsApplied) {
-            const mode = this.useNotAction ? 'addNotActions' : 'addActions';
-            const self = this;
-            if (this.isCompact) {
-                this.compactActions();
-            }
-            const uniqueActions = this.floydActions
-                .filter((elem, pos) => {
-                return self.floydActions.indexOf(elem) == pos;
-            })
-                .sort();
-            this[mode](...uniqueActions);
-        }
-        this.cdkActionsApplied = true;
+        return this.floydActions
+            .filter((elem, pos) => this.floydActions.indexOf(elem) == pos)
+            .sort();
     }
     notAction() {
         this.useNotAction = true;
@@ -69,7 +28,7 @@ class PolicyStatementWithActions extends _2_conditions_1.PolicyStatementWithCond
         return this.floydActions.length > 0;
     }
     to(action) {
-        if (this.servicePrefix.length && action.indexOf(':') < 0) {
+        if (this.servicePrefix.length && !action.includes(':')) {
             action = `${this.servicePrefix}:${action}`;
         }
         this.floydActions.push(action);
@@ -86,9 +45,10 @@ class PolicyStatementWithActions extends _2_conditions_1.PolicyStatementWithCond
     }
     allMatchingActions(...expressions) {
         expressions.forEach((expression) => {
+            const regex = parseRegex(expression);
             for (const [_, actions] of Object.entries(this.accessLevelList)) {
                 actions.forEach((action) => {
-                    if (action.match(RegexParser(expression))) {
+                    if (regex.test(action)) {
                         this.to(`${this.servicePrefix}:${action}`);
                     }
                 });
@@ -112,10 +72,8 @@ class PolicyStatementWithActions extends _2_conditions_1.PolicyStatementWithCond
         return this.addAccessLevel(access_level_1.AccessLevel.tagging);
     }
     addAccessLevel(accessLevel) {
-        if (accessLevel in this.accessLevelList) {
-            this.accessLevelList[accessLevel]?.forEach((action) => {
-                this.to(`${this.servicePrefix}:${action}`);
-            });
+        for (const action of this.accessLevelList[accessLevel] ?? []) {
+            this.to(`${this.servicePrefix}:${action}`);
         }
         return this;
     }
@@ -124,66 +82,60 @@ class PolicyStatementWithActions extends _2_conditions_1.PolicyStatementWithCond
         return this;
     }
     compactActions() {
-        const includeActions = this.floydActions.map((elem) => {
-            return elem.substring(elem.indexOf(':') + 1);
-        });
-        const excludeActions = [];
+        const prefix = `${this.servicePrefix}:`;
+        const known = new Set();
         for (const [_, actions] of Object.entries(this.accessLevelList)) {
-            actions.forEach((action) => {
-                if (!includeActions.includes(action)) {
-                    excludeActions.push(`^${action}$`);
-                }
-            });
+            for (const action of actions) {
+                known.add(action);
+            }
         }
-        let covered = [];
-        const subs = (0, common_substrings_1.default)(includeActions.map((action) => {
-            return `^${action}$`;
-        }), {
-            minLength: 3,
-            minOccurrence: 2,
-        })
-            .filter((sub) => {
-            for (const action of excludeActions) {
-                if (action.includes(sub.name)) {
-                    return false;
+        const selected = [];
+        const selectedSet = new Set();
+        const kept = [];
+        for (const action of this.floydActions) {
+            const name = action.substring(prefix.length);
+            if (action.startsWith(prefix) && known.has(name)) {
+                if (!selectedSet.has(name)) {
+                    selected.push(name);
+                    selectedSet.add(name);
                 }
             }
-            return true;
-        })
-            .sort((a, b) => {
-            if (a.source.length < b.source.length)
-                return 1;
-            if (a.source.length > b.source.length)
-                return -1;
-            return 0;
-        })
-            .filter((sub) => {
-            const sources = sub.source.filter((source) => {
-                return !covered.includes(source);
-            });
-            if (sources.length > 1) {
-                covered = covered.concat(sources);
-                return true;
+            else {
+                kept.push(action);
             }
-            return false;
-        });
-        const compactActionList = [];
-        subs.forEach((sub) => {
-            compactActionList.push(`${this.servicePrefix}:*${sub.name}*`
-                .replace('*^', '')
-                .replace('$*', ''));
-            sub.source.forEach((source) => {
-                includeActions[source] = '';
-            });
-        });
-        includeActions
-            .filter((action) => {
-            return action.length > 0;
-        })
-            .forEach((action) => {
-            compactActionList.push(`${this.servicePrefix}:${action}`);
-        });
-        this.floydActions = compactActionList;
+        }
+        const excluded = [];
+        for (const name of known) {
+            if (!selectedSet.has(name)) {
+                excluded.push(name);
+            }
+        }
+        for (const pattern of (0, compact_1.compactActionNames)(selected, excluded)) {
+            kept.push(`${prefix}${pattern}`);
+        }
+        this.floydActions = kept;
     }
 }
 exports.PolicyStatementWithActions = PolicyStatementWithActions;
+function parseRegex(expression) {
+    if (expression.length == 0) {
+        throw new Error('Invalid regular expression format.');
+    }
+    let pattern = expression;
+    let flags = '';
+    const end = expression.lastIndexOf('/');
+    if (expression.startsWith('/') && end > 1) {
+        pattern = expression.substring(1, end);
+        for (let i = end + 1; i < expression.length; i++) {
+            const char = expression.substring(i, i + 1);
+            if (!'abcdefghijklmnopqrstuvwxyz'.includes(char.toLowerCase())) {
+                break;
+            }
+            flags = `${flags}${char}`;
+        }
+    }
+    if (flags.includes('y')) {
+        pattern = `^(?:${pattern})`;
+    }
+    return new RegExp(pattern, flags.includes('i') ? 'i' : '');
+}

package/lib/shared/policy-statement/4-resources.d.ts

@@ -10,19 +10,13 @@ export interface ResourceType {
  * Adds "resource" functionality to the Policy Statement
  */
 export declare class PolicyStatementWithResources extends PolicyStatementWithActions {
-    private useNotResource;
+    protected useNotResource: boolean;
     protected floydResources: string[];
     protected skipAutoResource: boolean;
-    private cdkResourcesApplied;
     /**
-     * Injects resources into the statement.
-     *
-     * Only relevant for the main package. In CDK mode this only calls super.
+     * The resources of the statement without duplicates
      */
-    toJSON(): any;
-    toStatementJson(): any;
-    freeze(): any;
-    private cdkApplyResources;
+    protected uniqueResources(): string[];
     /**
      * Switches the statement to use [`NotResource`](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notresource.html).
      */
@@ -43,5 +37,5 @@ export declare class PolicyStatementWithResources extends PolicyStatementWithAct
      * This is the default behavior, unless the statement has principals.
      */
     onAllResources(): this;
-    private ensureResource;
+    protected ensureResource(): void;
 }

package/lib/shared/policy-statement/4-resources.js

@@ -8,47 +8,9 @@ class PolicyStatementWithResources extends _3_actions_1.PolicyStatementWithActio
         this.useNotResource = false;
         this.floydResources = [];
         this.skipAutoResource = false;
-        this.cdkResourcesApplied = false;
     }
-    toJSON() {
-        if (typeof this.addResources == 'function') {
-            this.cdkApplyResources();
-            return super.toJSON();
-        }
-        const mode = this.useNotResource ? 'NotResource' : 'Resource';
-        const statement = super.toJSON();
-        const self = this;
-        this.ensureResource();
-        if (this.floydResources.length) {
-            const resources = this.floydResources.filter((elem, pos) => {
-                return self.floydResources.indexOf(elem) == pos;
-            });
-            statement[mode] = resources.length > 1 ? resources : resources[0];
-        }
-        return statement;
-    }
-    toStatementJson() {
-        this.ensureResource();
-        this.cdkApplyResources();
-        return super.toStatementJson();
-    }
-    freeze() {
-        if (!this.frozen) {
-            this.ensureResource();
-            this.cdkApplyResources();
-        }
-        return super.freeze();
-    }
-    cdkApplyResources() {
-        if (!this.cdkResourcesApplied) {
-            const mode = this.useNotResource ? 'addNotResources' : 'addResources';
-            const self = this;
-            const uniqueResources = this.floydResources.filter((elem, pos) => {
-                return self.floydResources.indexOf(elem) == pos;
-            });
-            this[mode](...uniqueResources);
-            this.cdkResourcesApplied = true;
-        }
+    uniqueResources() {
+        return this.floydResources.filter((elem, pos) => this.floydResources.indexOf(elem) == pos);
     }
     notResource() {
         this.useNotResource = true;
@@ -68,10 +30,6 @@ class PolicyStatementWithResources extends _3_actions_1.PolicyStatementWithActio
     ensureResource() {
         if (this.hasResources())
             return;
-        if (this.hasResource)
-            return;
-        if (this.hasPrincipal)
-            return;
         if (this.skipAutoResource)
             return;
         this.onAllResources();

package/lib/shared/policy-statement/5-effect.d.ts

@@ -11,12 +11,6 @@ export declare enum Effect {
  */
 export declare class PolicyStatementWithEffect extends PolicyStatementWithResources {
     effect: Effect;
-    /**
-     * Injects effect into the statement.
-     *
-     * Only relevant for the main package. In CDK mode this only calls super.
-     */
-    toJSON(): any;
     /**
      * Allow the actions in this statement
      */

package/lib/shared/policy-statement/5-effect.js

@@ -12,14 +12,6 @@ class PolicyStatementWithEffect extends _4_resources_1.PolicyStatementWithResour
         super(...arguments);
         this.effect = Effect.allow;
     }
-    toJSON() {
-        if (typeof this.addResources == 'function') {
-            return super.toJSON();
-        }
-        const statement = super.toJSON();
-        statement.Effect = this.effect;
-        return statement;
-    }
     allow() {
         this.effect = Effect.allow;
         return this;

package/lib/shared/policy-statement/8-principals.d.ts

@@ -15,15 +15,6 @@ export declare enum PrincipalType {
 export declare class PolicyStatementWithPrincipal extends PolicyStatementWithArnDefaults {
     protected useNotPrincipal: boolean;
     protected myPrincipals: Principals;
-    /**
-     * Injects principals into the statement.
-     *
-     * Only relevant for the main package. In CDK mode this only calls super.
-     */
-    toJSON(): any;
-    toStatementJson(): any;
-    freeze(): any;
-    protected cdkApplyPrincipals(): void;
     /**
      * Switches the statement to use [`notPrincipal`](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notprincipal.html).
      */

package/lib/shared/policy-statement/8-principals.js

@@ -15,29 +15,6 @@ class PolicyStatementWithPrincipal extends _6_arn_defaults_1.PolicyStatementWith
         this.useNotPrincipal = false;
         this.myPrincipals = {};
     }
-    toJSON() {
-        if (typeof this.addResources == 'function') {
-            this.cdkApplyPrincipals();
-            return super.toJSON();
-        }
-        const mode = this.useNotPrincipal ? 'NotPrincipal' : 'Principal';
-        const statement = super.toJSON();
-        if (this.hasPrincipals()) {
-            statement[mode] = this.myPrincipals;
-        }
-        return statement;
-    }
-    toStatementJson() {
-        this.cdkApplyPrincipals();
-        return super.toStatementJson();
-    }
-    freeze() {
-        if (!this.frozen) {
-            this.cdkApplyPrincipals();
-        }
-        return super.freeze();
-    }
-    cdkApplyPrincipals() { }
     notPrincipal() {
         this.useNotPrincipal = true;
         return this;

package/lint/checkstyle-suppressions.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0"?>
+<!DOCTYPE suppressions PUBLIC
+    "-//Checkstyle//DTD SuppressionFilter Configuration 1.2//EN"
+    "https://checkstyle.org/dtds/suppressions_1_2.dtd">
+<suppressions>
+  <!-- The examples are snippets for the docs, which the runners compile without a package -->
+  <suppress checks="PackageDeclaration|OuterTypeFilename" files="[\\/]examples[\\/]"/>
+  <suppress checks="PackageDeclaration" files="[\\/]Main\.java$"/>
+</suppressions>

package/lint/go.mod

@@ -0,0 +1,28 @@
+module github.com/udondan/iam-floyd/lint
+
+go 1.27.1
+
+tool (
+	github.com/rhysd/actionlint/cmd/actionlint
+	mvdan.cc/sh/v3/cmd/shfmt
+)
+
+require (
+	github.com/bmatcuk/doublestar/v4 v4.10.0 // indirect
+	github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
+	github.com/fatih/color v1.19.0 // indirect
+	github.com/google/renameio/v2 v2.0.2 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mattn/go-runewidth v0.0.21 // indirect
+	github.com/mattn/go-shellwords v1.0.12 // indirect
+	github.com/rhysd/actionlint v1.7.12 // indirect
+	github.com/robfig/cron/v3 v3.0.1 // indirect
+	github.com/rogpeppe/go-internal v1.15.0 // indirect
+	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
+	golang.org/x/sync v0.20.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
+	golang.org/x/term v0.45.0 // indirect
+	mvdan.cc/editorconfig v0.3.0 // indirect
+	mvdan.cc/sh/v3 v3.14.1 // indirect
+)

package/lint/go.sum

@@ -0,0 +1,45 @@
+github.com/bmatcuk/doublestar/v4 v4.10.0 h1:zU9WiOla1YA122oLM6i4EXvGW62DvKZVxIe6TYWexEs=
+github.com/bmatcuk/doublestar/v4 v4.10.0/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc=
+github.com/clipperhouse/uax29/v2 v2.7.0 h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJv2v7Vk=
+github.com/clipperhouse/uax29/v2 v2.7.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
+github.com/fatih/color v1.19.0 h1:Zp3PiM21/9Ld6FzSKyL5c/BULoe/ONr9KlbYVOfG8+w=
+github.com/fatih/color v1.19.0/go.mod h1:zNk67I0ZUT1bEGsSGyCZYZNrHuTkJJB+r6Q9VuMi0LE=
+github.com/go-quicktest/qt v1.102.0 h1:HSQxCeh5YZH3EL3W39ixjtyaEhcWSXQHtHnMBzSs474=
+github.com/go-quicktest/qt v1.102.0/go.mod h1:p4lGIVX+8Wa6ZPNDvqcxq36XpUDLh42FLetFU7odllI=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/renameio/v2 v2.0.2 h1:qKZs+tfn+arruZZhQ7TKC/ergJunuJicWS6gLDt/dGw=
+github.com/google/renameio/v2 v2.0.2/go.mod h1:OX+G6WHHpHq3NVj7cAOleLOwJfcQ1s3uUJQCrr78SWo=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
+github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-runewidth v0.0.21 h1:jJKAZiQH+2mIinzCJIaIG9Be1+0NR+5sz/lYEEjdM8w=
+github.com/mattn/go-runewidth v0.0.21/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
+github.com/mattn/go-shellwords v1.0.12 h1:M2zGm7EW6UQJvDeQxo4T51eKPurbeFbe8WtebGE2xrk=
+github.com/mattn/go-shellwords v1.0.12/go.mod h1:EZzvwXDESEeg03EKmM+RmDnNOPKG4lLtQsUlTZDWQ8Y=
+github.com/rhysd/actionlint v1.7.12 h1:vQ4GeJN86C0QH+gTUQcs8McmK62OLT3kmakPMtEWYnY=
+github.com/rhysd/actionlint v1.7.12/go.mod h1:krOUhujIsJusovkaYzQ/VNH8PFexjNKqU0q5XI/4w+g=
+github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs=
+github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=
+github.com/rogpeppe/go-internal v1.15.0 h1:D0RCU5rMAp+SpgkiNdrjfJ+LX4J1M32V2NeCY7EJ6hc=
+github.com/rogpeppe/go-internal v1.15.0/go.mod h1:DrUVZyrJU+txYW5/1kwtXQSMFio52ZOxX7yM1VHvnxs=
+go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
+go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
+golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=
+golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0=
+golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w=
+golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
+golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+mvdan.cc/editorconfig v0.3.0 h1:D1D2wLYEYGpawWT5SpM5pRivgEgXjtEXwC9MWhEY0gQ=
+mvdan.cc/editorconfig v0.3.0/go.mod h1:NcJHuDtNOTEJ6251indKiWuzK6+VcrMuLzGMLKBFupQ=
+mvdan.cc/sh/v3 v3.14.1 h1:bXkhQWNHCs0KZEChF8hYS6FC+T2N9mUZLbQv9blditI=
+mvdan.cc/sh/v3 v3.14.1/go.mod h1:syYCoFET8w9tvevxiXUtY8/ICrU+l26jHmhJDra3Vwo=