Bump up version of external packages

.gitignore

@@ -16,4 +16,5 @@
 
 # Other files and directories
 dist/
+.task/
 *.bak

Taskfile.yml

@@ -0,0 +1,50 @@
+version: '3'
+
+tasks:
+  default:
+    cmds:
+      - task: clean
+      - task: test
+      - task: nancy
+      - task: graph
+
+  build-all:
+    desc: Build executable binary with GoReleaser.
+    cmds:
+      - goreleaser --snapshot --skip-publish --rm-dist
+
+  test:
+    desc: Test and lint.
+    cmds:
+      - go mod verify
+      - go test ./...
+      - docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v1.41.1 golangci-lint run --enable gosec --timeout 3m0s ./...
+    sources:
+      - ./go.mod
+      - '**/*.go'
+
+  nancy:
+    desc: Check vulnerability of external packages with Nancy.
+    cmds:
+      - depm list -j | docker run --rm -i sonatypecommunity/nancy:latest sleuth -n
+    sources:
+      - ./go.mod
+      - '**/*.go'
+
+  clean:
+    desc: Initialize module and build cache, and remake go.sum file.
+    cmds:
+      - rm -f ./go.sum
+      - go clean -cache
+      - go clean -modcache
+      - go mod tidy -v
+
+  graph:
+    desc: Make grapth of dependency modules.
+    cmds:
+      - depm m --dot --dot-config dot-config.toml | dot -Tpng -o ./dependency.png
+    sources:
+      - ./go.mod
+      - '**/*.go'
+    generates:
+      - ./dependency.png

go.mod

@@ -4,10 +4,10 @@ go 1.16
 
 require (
 	github.com/BurntSushi/toml v0.3.1
-	github.com/emicklei/dot v0.15.0
-	github.com/google/licenseclassifier v0.0.0-20210324205846-148b633b0534
-	github.com/spf13/cobra v1.1.3
+	github.com/emicklei/dot v0.16.0
+	github.com/google/licenseclassifier v0.0.0-20210325184830-bb04aff29e72
+	github.com/spf13/cobra v1.2.1
 	github.com/spiegel-im-spiegel/errs v1.0.2
 	github.com/spiegel-im-spiegel/gocli v0.10.4
-	golang.org/x/tools v0.1.0
+	golang.org/x/tools v0.1.4
 )