chore(deps): bump the dependencies group with 3 updates

[dependabot]

Bumps the dependencies group with 3 updates: github.com/google/cel-go, golang.org/x/net and google.golang.org/api.

Updates github.com/google/cel-go from 0.27.0 to 0.28.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.28.0

High-Level Changes

• Enhanced JSON Interoperability: New support for JSON names across the checker, AST, and runtime allows for more seamless data handling when working with JSON-native structures.
• Improved Developer Tooling: Integration is now smoother thanks to new utilities for converting Go errors into cel.Issues and more descriptive, context-aware error messages.
• Greater Environment Flexibility: You can now redeclare variables as constants and export parse limit options, providing finer control over how CEL environments are configured and constrained.
• Native Struct Improvements: Support for mixing CEL and native values within native structs simplifies the handling of complex, hybrid data types.

---

🚀 Features

• Add helper method to check whether a function has a singleton binding in google/cel-go#1266
• Helper utility for converting a Go error into cel.Issues in google/cel-go#1267
• Policy API improvements in google/cel-go#1268
• CEL Test usability requirements in google/cel-go#1269
• Better context-related error messages in google/cel-go#1271
• Sort env.Config values where reasonable in google/cel-go#1273
• Support redeclaring variables as constants in NewEnv in google/cel-go#1275
• Add support for exporting parse limit options in google/cel-go#1277
• Support mixing CEL values and native values in native structs in google/cel-go#1270
• Add checker, AST, and type-provider support for JSON names in google/cel-go#1283
• JSON field names runtime support in google/cel-go#1286
• Optionally include reachable fieldpaths in prompt in google/cel-go#1285
• REPL -- cel-spec pb2 and json name support google/cel-go#1294

🐞 Bug Fixes

• Fix support for config-based type references in google/cel-go#1265
• Check arg kinds in optional.or and .orValue impl in google/cel-go#1276
• Bazel fixes for import in google/cel-go#1278
• Support zero-value literals in presence test inlining google/cel-go#1280
• Cache concatList.Size() to prevent O(N^2) evaluation time google/cel-go#1291
• Preserve runtime error node IDs from Resolve google/cel-go#1290
• Default enable identifier escaping with backticks google/cel-go#1295
• Cap format string precision to prevent memory exhaustion google/cel-go#1292

🛠️ Maintenance & Internal

• chore: Migrate gsutil usage to gcloud storage in google/cel-go#1274
• Lint fixes for exported function/type comments in google/cel-go#1279
• Lint fixes for import in google/cel-go#1287

---

Full Changelog: https://github.com/google/cel-go/compare/v0.27.0...v0.28.0-alpha

Release v0.28.0-alpha

High-Level Changes

... (truncated)

Commits

• 6b8f6d6 fix: cap format string precision to prevent memory exhaustion (#1292)
• d942970 Default enable identifier escaping with backticks (#1295)
• 7114ed2 Preserve runtime error node IDs from Resolve (#1290)
• d91350b fix: cache concatList.Size() to prevent O(N^2) evaluation time (#1291)
• 68bdd8c REPL -- cel-spec pb2 and json name support (#1294)
• d19e782 Support zero-value literals in presence test inlining and fix shadowing bugs ...
• 7c461fc Lint fixes for import (#1287)
• 09e3119 Optionally include reachable fieldpaths in prompt (#1285)
• ae49cd0 Json field names runtime support (#1286)
• 3624b64 Add checker, ast, and type-provider support for JSON names (#1283)
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.52.0 to 0.53.0

Commits

• a8d1fc1 go.mod: update golang.org/x dependencies
• 056ac74 quic: avoid depending on golang.org/x/sys/unix
• c85f611 http3: add http3 package for testing in std
• 805fc81 http2: add transport API tests
• e63b894 http2: support testing via net/http.Transport.RoundTrip
• 9ee1e48 http2/hpack: prevent HeaderField from escaping during encoding
• 1e71bd8 http2: prevent hanging Transport due to bad SETTINGS frame
• 7bca150 internal/http3: respect net/http Server Shutdown context when shutting down
• 44c41be internal/http3: prevent server from holding mutex when sleeping during shutdown
• 228a67a internal/http3: add CloseIdleConnections support in transport
• Additional commits viewable in compare view

Updates google.golang.org/api from 0.274.0 to 0.275.0

Release notes

Sourced from google.golang.org/api's releases.

v0.275.0

0.275.0 (2026-04-07)

Features

• all: Auto-regenerate discovery clients (#3557) (2b2ef99)
• all: Auto-regenerate discovery clients (#3560) (9437d4d)

Changelog

Sourced from google.golang.org/api's changelog.

0.275.0 (2026-04-07)

Features

• all: Auto-regenerate discovery clients (#3557) (2b2ef99)
• all: Auto-regenerate discovery clients (#3560) (9437d4d)

Commits

• d43aa15 chore(main): release 0.275.0 (#3558)
• 9437d4d feat(all): auto-regenerate discovery clients (#3560)
• 0a62c64 chore(all): update cloud.google.com/go/auth to v0.20.0 (#3559)
• 2b2ef99 feat(all): auto-regenerate discovery clients (#3557)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Code Metrics Report

	main (f37f383)	#513 (695987a)	+/-
Coverage	33.7%	33.7%	0.0%
Code to Test Ratio	1:0.9	1:0.9	0.0
Test Execution Time	12s	10s	-2s

Details

  |                     | main (f37f383) | #513 (695987a) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          33.7% |          33.7% | 0.0% |
  |   Files             |             31 |             31 |    0 |
  |   Lines             |           3407 |           3407 |    0 |
  |   Covered           |           1151 |           1151 |    0 |
  | Code to Test Ratio  |          1:0.9 |          1:0.9 |  0.0 |
  |   Code              |           7022 |           7022 |    0 |
  |   Test              |           6578 |           6578 |    0 |
+ | Test Execution Time |            12s |            10s |  -2s |

---

Reported by octocov