chore(deps): bump the go group with 7 updates (#212)

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps the go group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) |
`0.37.0-flux.1` | `0.37.1-flux.1` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) |
`1.24.0` | `1.25.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) |
`0.94.0` | `0.96.0` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.62.0`
| `0.64.0` |
| [github.com/fluxcd/pkg/version](https://github.com/fluxcd/pkg) |
`0.11.0` | `0.12.0` |
| [ocm.software/ocm](https://github.com/open-component-model/ocm) |
`0.34.3` | `0.35.0` |
|
[sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime)
| `0.22.4` | `0.23.0` |

Updates `github.com/fluxcd/cli-utils` from 0.37.0-flux.1 to
0.37.1-flux.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/cli-utils/commit/721fb3fa96876f9ed223311d4befa7e5d6eb7e3a"><code>721fb3f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/cli-utils/issues/18">#18</a>
from fluxcd/backport-upstream-635</li>
<li><a
href="https://github.com/fluxcd/cli-utils/commit/5288f56f7b857886f9a89b8317196ae0899bc100"><code>5288f56</code></a>
fix: treat rate limiter deadline as a context deadline</li>
<li>See full diff in <a
href="https://github.com/fluxcd/cli-utils/compare/v0.37.0-flux.1...v0.37.1-flux.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/apis/meta` from 1.24.0 to 1.25.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/cde06a52d9795fada48a80abf7d4a1f6d48d2ee4"><code>cde06a5</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1079">#1079</a> from
fluxcd/kube-v0.35.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/21a19466a1c05b04d875d6906b44aa2d587b56fb"><code>21a1946</code></a>
auth: Fix Azure auth test for China and US Gov clouds</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/125d607f432ce111c90d6885ddf9a023b3af053b"><code>125d607</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4f26e76611aa24bdd7fadf79e459976cb66f4b0d"><code>4f26e76</code></a>
Update dependencies to Kubernetes v0.35.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/98667f871e18200216d32ae56382aff24c81c0be"><code>98667f8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1069">#1069</a> from
fluxcd/helm-4.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2aea89fc133412f54f949b02a59aef6dbb18431c"><code>2aea89f</code></a>
Upgrade Helm to v4.1.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4895944c99d8613382ad59520ac31a2838f921e1"><code>4895944</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1077">#1077</a> from
fluxcd/ssa-custom-stage</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/8a98478ce48f29257c5aa06e93531f44227eee2c"><code>8a98478</code></a>
ssa: introduce custom apply stage</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2818265d4e47d3d012ae9b29591cbf2e81141a7e"><code>2818265</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1076">#1076</a> from
fluxcd/gh-app-owner-helpers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b5e6bdd6c79a92db6d5a4fb126de71d120ffa01e"><code>b5e6bdd</code></a>
Prepare for release</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/apis/meta/v1.24.0...apis/meta/v1.25.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/runtime` from 0.94.0 to 0.96.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/cde06a52d9795fada48a80abf7d4a1f6d48d2ee4"><code>cde06a5</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1079">#1079</a> from
fluxcd/kube-v0.35.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/21a19466a1c05b04d875d6906b44aa2d587b56fb"><code>21a1946</code></a>
auth: Fix Azure auth test for China and US Gov clouds</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/125d607f432ce111c90d6885ddf9a023b3af053b"><code>125d607</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4f26e76611aa24bdd7fadf79e459976cb66f4b0d"><code>4f26e76</code></a>
Update dependencies to Kubernetes v0.35.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/98667f871e18200216d32ae56382aff24c81c0be"><code>98667f8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1069">#1069</a> from
fluxcd/helm-4.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2aea89fc133412f54f949b02a59aef6dbb18431c"><code>2aea89f</code></a>
Upgrade Helm to v4.1.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4895944c99d8613382ad59520ac31a2838f921e1"><code>4895944</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1077">#1077</a> from
fluxcd/ssa-custom-stage</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/8a98478ce48f29257c5aa06e93531f44227eee2c"><code>8a98478</code></a>
ssa: introduce custom apply stage</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2818265d4e47d3d012ae9b29591cbf2e81141a7e"><code>2818265</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1076">#1076</a> from
fluxcd/gh-app-owner-helpers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b5e6bdd6c79a92db6d5a4fb126de71d120ffa01e"><code>b5e6bdd</code></a>
Prepare for release</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.94.0...runtime/v0.96.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/ssa` from 0.62.0 to 0.64.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/cde06a52d9795fada48a80abf7d4a1f6d48d2ee4"><code>cde06a5</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1079">#1079</a> from
fluxcd/kube-v0.35.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/21a19466a1c05b04d875d6906b44aa2d587b56fb"><code>21a1946</code></a>
auth: Fix Azure auth test for China and US Gov clouds</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/125d607f432ce111c90d6885ddf9a023b3af053b"><code>125d607</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4f26e76611aa24bdd7fadf79e459976cb66f4b0d"><code>4f26e76</code></a>
Update dependencies to Kubernetes v0.35.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/98667f871e18200216d32ae56382aff24c81c0be"><code>98667f8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1069">#1069</a> from
fluxcd/helm-4.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2aea89fc133412f54f949b02a59aef6dbb18431c"><code>2aea89f</code></a>
Upgrade Helm to v4.1.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/4895944c99d8613382ad59520ac31a2838f921e1"><code>4895944</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1077">#1077</a> from
fluxcd/ssa-custom-stage</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/8a98478ce48f29257c5aa06e93531f44227eee2c"><code>8a98478</code></a>
ssa: introduce custom apply stage</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2818265d4e47d3d012ae9b29591cbf2e81141a7e"><code>2818265</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1076">#1076</a> from
fluxcd/gh-app-owner-helpers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b5e6bdd6c79a92db6d5a4fb126de71d120ffa01e"><code>b5e6bdd</code></a>
Prepare for release</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/ssa/v0.62.0...ssa/v0.64.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/version` from 0.11.0 to 0.12.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/7a0e0e2f50d436f415cef495924a4e3bc25bac35"><code>7a0e0e2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/903">#903</a> from
fluxcd/dependabot/github_actions/ci-eefd586f05</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/0b69606095bf35e953fe97c01d14032fc318f3f5"><code>0b69606</code></a>
build(deps): bump the ci group across 1 directory with 12 updates</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/1b76ef3df3b8cbe605c2b3c07721b983e0322a42"><code>1b76ef3</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/912">#912</a> from
fluxcd/k8s-1.33</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/bcb62f2376e5e45eb98a74b145718edebb292635"><code>bcb62f2</code></a>
Update to Kubernetes 1.33.0 and Go 1.24.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/877b123dd56df041167b7161b10d127152a45fb0"><code>877b123</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/904">#904</a> from
fluxcd/git-mtls</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/ee8655f54d61c755b048c3d71cfc4c7fc9fcca23"><code>ee8655f</code></a>
Remove duplicate err return</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3465f32bb954a223174d81f7bb1999f586557867"><code>3465f32</code></a>
Wire <code>ClientCert</code> and <code>ClientKey</code> into gogit
client</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f069943a1a191365d0cefc0ecbc1ae94fa4a3797"><code>f069943</code></a>
Add <code>ClientCert</code> and <code>ClientKey</code> to Git auth
options</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/7579486043b597626c1dddd95c23cd4413581beb"><code>7579486</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/910">#910</a> from
fluxcd/renew-certs</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b890f1b8adfea53e1da74f6177ef88167c9c9d46"><code>b890f1b</code></a>
Renew testdata certs</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/tar/v0.11.0...tar/v0.12.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `ocm.software/ocm` from 0.34.3 to 0.35.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm/releases">ocm.software/ocm's
releases</a>.</em></p>
<blockquote>
<h2>v0.35.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat(transfer): Optimized approach for OCM transfer by implementing
a concurrent worker pool by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1676">open-component-model/ocm#1676</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix: Address concurrent setting of log level for yq-lib by <a
href="https://github.com/dee0sap"><code>@​dee0sap</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1690">open-component-model/ocm#1690</a></li>
<li>bugfix: Correct the usage of sync.OnceFunc by <a
href="https://github.com/dee0sap"><code>@​dee0sap</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1696">open-component-model/ocm#1696</a></li>
</ul>
<h3>⬆️ Dependencies</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump github.com/docker/docker from 28.3.2+incompatible
to 28.3.3+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1688">open-component-model/ocm#1688</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1691">open-component-model/ocm#1691</a></li>
<li>chore: bump docker/docker to latest version again by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1693">open-component-model/ocm#1693</a></li>
<li>chore(deps): bump the go group across 1 directory with 11 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1701">open-component-model/ocm#1701</a></li>
<li>chore: retract release 0.34 by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1709">open-component-model/ocm#1709</a></li>
<li>chore: revert upgrade of github.com/mikefarah/yq/v4 by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1710">open-component-model/ocm#1710</a></li>
<li>chore(deps): adjust dependabot ignore for github.com/mikefarah/yq/v4
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1716">open-component-model/ocm#1716</a></li>
<li>chore(deps): bump the go group with 11 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1719">open-component-model/ocm#1719</a></li>
<li>chore: [releases/0.35] cherry-pick: <a
href="https://redirect.github.com/open-component-model/ocm/pull/1738">open-component-model/ocm#1738</a>
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1743">open-component-model/ocm#1743</a></li>
<li>chore: [releases/0.35] cherry-pick: <a
href="https://redirect.github.com/open-component-model/ocm/pull/1740">open-component-model/ocm#1740</a>
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1744">open-component-model/ocm#1744</a></li>
<li>chore: [releases/0.35] cherry-pick: <a
href="https://redirect.github.com/open-component-model/ocm/pull/1752">open-component-model/ocm#1752</a>
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1753">open-component-model/ocm#1753</a></li>
<li>chore: [releases/0.35] cherry-pick: <a
href="https://redirect.github.com/open-component-model/ocm/pull/1718">open-component-model/ocm#1718</a>
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1760">open-component-model/ocm#1760</a></li>
<li>chore: [releases/0.35] cherry-pick: <a
href="https://redirect.github.com/open-component-model/ocm/pull/1757">open-component-model/ocm#1757</a>
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1761">open-component-model/ocm#1761</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.35.0-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a>[bot] in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1685">open-component-model/ocm#1685</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/open-component-model/ocm/compare/v0.34...v0.35.0">https://github.com/open-component-model/ocm/compare/v0.34...v0.35.0</a></p>
<h2>v0.35.0-rc.3</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat(transfer): Optimized approach for OCM transfer by implementing
a concurrent worker pool by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1676">open-component-model/ocm#1676</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix: Address concurrent setting of log level for yq-lib by <a
href="https://github.com/dee0sap"><code>@​dee0sap</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1690">open-component-model/ocm#1690</a></li>
<li>bugfix: Correct the usage of sync.OnceFunc by <a
href="https://github.com/dee0sap"><code>@​dee0sap</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1696">open-component-model/ocm#1696</a></li>
</ul>
<h3>⬆️ Dependencies</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump github.com/docker/docker from 28.3.2+incompatible
to 28.3.3+incompatible by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1688">open-component-model/ocm#1688</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1691">open-component-model/ocm#1691</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm/commit/8bbe85063753d4d01e417852256f019ba205e8c6"><code>8bbe850</code></a>
chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 in the ci group
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1717">#1717</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/6fead6f433cd19d6d31922ad31c4a9d7c958d50b"><code>6fead6f</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1720">#1720</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/2b20b646aabe0db92d4b98ab33a9a9a6fbbc3f3f"><code>2b20b64</code></a>
chore(deps): bump the go group with 11 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1719">#1719</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/06e9c0462bb3e3577d00217d69b94040a53d3f43"><code>06e9c04</code></a>
chore(deps): adjust dependabot ignore for github.com/mikefarah/yq/v4 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1716">#1716</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/48fef6aed94507d64344b565cf10b1296af16db0"><code>48fef6a</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1712">#1712</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/92c33a0511fbfd2e6e08d0346e61abcf92436893"><code>92c33a0</code></a>
chore: revert upgrade of github.com/mikefarah/yq/v4 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1710">#1710</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/d69e966380b822611ce50dc0fa389025f902af9f"><code>d69e966</code></a>
chore: retract release 0.34 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1709">#1709</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/8e129430823fcb740e8f1e26319c3cade75ae4c3"><code>8e12943</code></a>
chore(deps): bump github/codeql-action from 4.31.5 to 4.31.6 in the ci
group ...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/0d4f9b73c8b717ba335ae5d3eee5e279f848a86e"><code>0d4f9b7</code></a>
chore(deps): bump the ci group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1705">#1705</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/0d23d43de13b6977f04ff9b3730d1b508d2c988c"><code>0d23d43</code></a>
chore(deps): bump github/codeql-action from 4.31.4 to 4.31.5 in the ci
group ...</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm/compare/v0.34.3...v0.35">compare
view</a></li>
</ul>
</details>
<br />

Updates `sigs.k8s.io/controller-runtime` from 0.22.4 to 0.23.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/controller-runtime/releases">sigs.k8s.io/controller-runtime's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.0</h2>
<h2>🔆 Highlights</h2>
<ul>
<li>Client: Add subresource Apply support by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3321">kubernetes-sigs/controller-runtime#3321</a></li>
<li>Conversion: Enable implementation of conversion outside of API
packages by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3335">kubernetes-sigs/controller-runtime#3335</a></li>
<li>Priorityqueue: Various improvements, bug fixes and now enabled per
default</li>
<li>Webhooks: Generic Validator and Defaulter by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3360">kubernetes-sigs/controller-runtime#3360</a></li>
</ul>
<h2>⚠️ Breaking changes</h2>
<ul>
<li>Dependencies: Update to k8s.io/* v1.35 by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
<a
href="https://github.com/dongjiang1989"><code>@​dongjiang1989</code></a>
<a href="https://github.com/kannon92"><code>@​kannon92</code></a> (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3316">#3316</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3349">#3349</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3386">#3386</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3391">#3391</a>,
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3401">#3401</a>)</li>
<li>Client: Add subresource Apply support by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3321">kubernetes-sigs/controller-runtime#3321</a></li>
<li>Events: Migration to the new events API by <a
href="https://github.com/clebs"><code>@​clebs</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3262">kubernetes-sigs/controller-runtime#3262</a>
<ul>
<li>Using the new <code>GetEventRecorderFor</code> requires updating
your rbac for events to use the <code>events.k8s.io</code> apiGroup
rather than the `` (core) apiGroup</li>
</ul>
</li>
<li>Fakeclient: Set ResourceVersion for SSA Create by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3311">kubernetes-sigs/controller-runtime#3311</a></li>
<li>Webhooks: Generic Validator and Defaulter by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3360">kubernetes-sigs/controller-runtime#3360</a>
<ul>
<li>Existing code of the form
<code>builder.WebhookManagedBy(mgr).For(&amp;corev1.Deployment{})</code>
has to be changed to <code>builder.WebhookManagedBy(mgr,
&amp;appsv1.Deployment{})</code></li>
<li>Existing webhook implementations have to be changed to take the
concrete object rather than <code>runtime.Object</code>, for example
from <code>ValidateCreate(ctx context.Context, obj runtime.Object)
(admission.Warnings, error)</code> to <code>ValidateCreate(ctx
context.Context, obj *appsv1.Deployment) (admission.Warnings,
error)</code></li>
</ul>
</li>
</ul>
<h2>✨ Features</h2>
<ul>
<li>Cache: Allow fine-granular SyncPeriod configuration by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3376">kubernetes-sigs/controller-runtime#3376</a></li>
<li>Client: Add FieldOwner option to client.Options by <a
href="https://github.com/aerfio"><code>@​aerfio</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3389">kubernetes-sigs/controller-runtime#3389</a></li>
<li>Client: Add FieldValidation option to client.Options by <a
href="https://github.com/aerfio"><code>@​aerfio</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3393">kubernetes-sigs/controller-runtime#3393</a></li>
<li>Conversion: Enable implementation of conversion outside of API
packages by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3335">kubernetes-sigs/controller-runtime#3335</a></li>
<li>Metrics: Add controller_runtime_reconcile_timeouts_total metric to
track ReconciliationTimeout timeouts by <a
href="https://github.com/godwinpang"><code>@​godwinpang</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3382">kubernetes-sigs/controller-runtime#3382</a></li>
<li>Priorityqueue: Add optional Priority field to reconcile.Result by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3333">kubernetes-sigs/controller-runtime#3333</a></li>
<li>Priorityqueue: Enable per default by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3332">kubernetes-sigs/controller-runtime#3332</a></li>
<li>Priorityqueue: Use a buffer to optimize priority queue AddWithOpts
performance by <a
href="https://github.com/zach593"><code>@​zach593</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3415">kubernetes-sigs/controller-runtime#3415</a></li>
<li>Source/Kind: Delay reconciliation until handlers sync by <a
href="https://github.com/GonzaloLuminary"><code>@​GonzaloLuminary</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3406">kubernetes-sigs/controller-runtime#3406</a></li>
<li>Webhooks: Add WithContextFunc to WebhookBuilder by <a
href="https://github.com/dmvolod"><code>@​dmvolod</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3324">kubernetes-sigs/controller-runtime#3324</a></li>
</ul>
<h2>🐛 Bugfixes</h2>
<ul>
<li>Client: Allow SSA after normal resource creation by <a
href="https://github.com/filipcirtog"><code>@​filipcirtog</code></a> in
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3346">kubernetes-sigs/controller-runtime#3346</a></li>
<li>Client: Fix List in namespaced client to list objects that are
cluster scoped by <a
href="https://github.com/troy0820"><code>@​troy0820</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3351">kubernetes-sigs/controller-runtime#3351</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3353">kubernetes-sigs/controller-runtime#3353</a></li>
<li>Envtest: Respect pre-configured binary paths in ControlPlane by <a
href="https://github.com/mzhaom"><code>@​mzhaom</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3372">kubernetes-sigs/controller-runtime#3372</a></li>
<li>Fakeclient: Fix a number of bugs when updating through apply by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3319">kubernetes-sigs/controller-runtime#3319</a></li>
<li>FakeClient: Fix Apply with Unstructured ApplyConfiguration and
resourceVersion unset by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3403">kubernetes-sigs/controller-runtime#3403</a></li>
<li>Fakeclient: Fix SSA after List with non-list kind by <a
href="https://github.com/sbueringer"><code>@​sbueringer</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3364">kubernetes-sigs/controller-runtime#3364</a></li>
<li>Fakeclient: Panic when trying to build more than one instance of
fake.ClientBuilder by <a
href="https://github.com/troy0820"><code>@​troy0820</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3314">kubernetes-sigs/controller-runtime#3314</a></li>
<li>Leaderelection: Copy all parent context values to leader elector's
context by <a
href="https://github.com/msudheendra-cflt"><code>@​msudheendra-cflt</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3327">kubernetes-sigs/controller-runtime#3327</a></li>
<li>Metrics: Adding missing exponential buckets on webhook native
histogram by <a
href="https://github.com/brito-rafa"><code>@​brito-rafa</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3411">kubernetes-sigs/controller-runtime#3411</a></li>
<li>Priorityqueue: Do FIFO ordering within priorities and not across by
<a href="https://github.com/zach593"><code>@​zach593</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3408">kubernetes-sigs/controller-runtime#3408</a></li>
<li>Priorityqueue: Don't block on Get when queue is shutdown (2nd try)
by <a href="https://github.com/sbueringer"><code>@​sbueringer</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3337">kubernetes-sigs/controller-runtime#3337</a></li>
<li>Priorityqueue: Ensure priority queue always returns high-priority
items first by <a
href="https://github.com/moritzmoe"><code>@​moritzmoe</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3330">kubernetes-sigs/controller-runtime#3330</a></li>
<li>Priorityqueue: Fix
TestWhenAddingMultipleItemsWithRatelimitTrueTheyDontAffectEachOther by
<a href="https://github.com/zach593"><code>@​zach593</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3395">kubernetes-sigs/controller-runtime#3395</a></li>
<li>Priorityqueue: Limit depthWithPriorityMetric cardinality to 25 by <a
href="https://github.com/alvaroaleman"><code>@​alvaroaleman</code></a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3419">kubernetes-sigs/controller-runtime#3419</a></li>
<li>Priorityqueue: Properly sync the <code>waiter</code> manipulation by
<a href="https://github.com/fossedihelm"><code>@​fossedihelm</code></a>
in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3368">kubernetes-sigs/controller-runtime#3368</a></li>
<li>setup-envtest: Select the newest Kubernetes by default by <a
href="https://github.com/cbandy"><code>@​cbandy</code></a> in <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3380">kubernetes-sigs/controller-runtime#3380</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/129853d4ae0548600432fb76cd4d965cfcb854a6"><code>129853d</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3419">#3419</a>
from alvaroaleman/limit-cardinality</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/00b8b07cf3445ce3a46bd6c30430401814311392"><code>00b8b07</code></a>
:bug: Limit depthWithPriorityMetric cardinality to 25</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/43b0e35a8e53c7976038c106a5f5e953e64deffd"><code>43b0e35</code></a>
✨ Delay reconciliation until handlers sync (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3406">#3406</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/137b9c03159a5a3314f9212159219a044a66933b"><code>137b9c0</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3415">#3415</a>
from zach593/pq-buffer</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/c47f9cb5104b0f46d98f6a2c1a424e7cc654d607"><code>c47f9cb</code></a>
Use a buffer to optimize priority queue AddWithOpts performance</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/5de4c4f5997c4b9469c7cfe003eff06bfdbd7f87"><code>5de4c4f</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3416">#3416</a>
from alvaroaleman/twotrees</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/9de69a734f9125a15d06a001320cc758aaec87e1"><code>9de69a7</code></a>
:seedling: Priorityqueue: Use separate b-trees for ready and non-ready
items</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/0c3a9102bc0af27b969b17191e68e6f28ff12c23"><code>0c3a910</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3408">#3408</a>
from zach593/pq-fifo</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/31d30b6696c75a8b6fc29a0b85b7686eefecca72"><code>31d30b6</code></a>
fix priority queue ordering when item priority changes</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/a0855902b3703e1fe66b06715d2fb0716fd1a4dd"><code>a085590</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3411">#3411</a>
from brito-rafa/issue-3410-expbucket-webhook</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.22.4...v0.23.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -11,17 +11,17 @@ replace github.com/ThalesIgnite/crypto11 => github.com/ThalesGroup/crypto11 v1.6
 
 require (
 	code.gitea.io/sdk/gitea v0.22.1
-	github.com/fluxcd/cli-utils v0.37.0-flux.1
+	github.com/fluxcd/cli-utils v0.37.1-flux.1
 	github.com/fluxcd/flux2/v2 v2.7.5
 	github.com/fluxcd/helm-controller/api v1.4.5
 	github.com/fluxcd/image-automation-controller/api v1.0.4
 	github.com/fluxcd/image-reflector-controller/api v1.0.4
 	github.com/fluxcd/kustomize-controller/api v1.7.3
 	github.com/fluxcd/notification-controller/api v1.7.5
-	github.com/fluxcd/pkg/apis/meta v1.24.0
-	github.com/fluxcd/pkg/runtime v0.94.0
-	github.com/fluxcd/pkg/ssa v0.62.0
-	github.com/fluxcd/pkg/version v0.11.0
+	github.com/fluxcd/pkg/apis/meta v1.25.0
+	github.com/fluxcd/pkg/runtime v0.96.0
+	github.com/fluxcd/pkg/ssa v0.64.0
+	github.com/fluxcd/pkg/version v0.12.0
 	github.com/fluxcd/source-controller/api v1.7.4
 	github.com/open-component-model/git-controller v0.12.1
 	github.com/open-component-model/ocm-controller v0.28.0
@@ -32,8 +32,8 @@ require (
 	k8s.io/apimachinery v0.35.0
 	k8s.io/cli-runtime v0.35.0
 	k8s.io/client-go v0.35.0
-	ocm.software/ocm v0.34.3
-	sigs.k8s.io/controller-runtime v0.22.4
+	ocm.software/ocm v0.35.0
+	sigs.k8s.io/controller-runtime v0.23.0
 	sigs.k8s.io/e2e-framework v0.6.0
 	sigs.k8s.io/kustomize/api v0.21.0
 	sigs.k8s.io/yaml v1.6.0
@@ -79,22 +79,22 @@ require (
 	github.com/aliyun/credentials-go v1.4.8 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/aws/aws-sdk-go-v2 v1.41.0 // indirect
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.3 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 // indirect
 	github.com/aws/aws-sdk-go-v2/config v1.32.5 // indirect
 	github.com/aws/aws-sdk-go-v2/credentials v1.19.5 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.16 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.7 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.13 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.16 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.16 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.13 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.52.0 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.54.2 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.4 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.6 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.16 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.13 // indirect
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.90.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.93.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/signin v1.0.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sso v1.30.7 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.12 // indirect
@@ -139,7 +139,7 @@ require (
 	github.com/digitorus/timestamp v0.0.0-20250524132541-c45532741eea // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v29.0.3+incompatible // indirect
+	github.com/docker/cli v29.1.2+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker v28.5.2+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.9.4 // indirect
@@ -155,7 +155,7 @@ require (
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fluxcd/pkg/apis/acl v0.9.0 // indirect
-	github.com/fluxcd/pkg/apis/kustomize v1.14.0 // indirect
+	github.com/fluxcd/pkg/apis/kustomize v1.15.0 // indirect
 	github.com/fluxcd/pkg/kustomize v1.24.0 // indirect
 	github.com/fluxcd/pkg/tar v0.16.0 // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
@@ -167,7 +167,7 @@ require (
 	github.com/go-fed/httpsig v1.1.0 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
 	github.com/go-git/go-billy/v5 v5.6.2 // indirect
-	github.com/go-git/go-git/v5 v5.16.3 // indirect
+	github.com/go-git/go-git/v5 v5.16.4 // indirect
 	github.com/go-ini/ini v1.67.0 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.3 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
@@ -233,7 +233,7 @@ require (
 	github.com/jinzhu/copier v0.4.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kevinburke/ssh_config v1.4.0 // indirect
-	github.com/klauspost/compress v1.18.1 // indirect
+	github.com/klauspost/compress v1.18.2 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/klauspost/pgzip v1.2.6 // indirect
 	github.com/letsencrypt/boulder v0.20251110.0 // indirect
@@ -274,7 +274,7 @@ require (
 	github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
 	github.com/oklog/ulid v1.3.1 // indirect
 	github.com/oleiade/reflections v1.1.0 // indirect
-	github.com/onsi/gomega v1.38.2 // indirect
+	github.com/onsi/gomega v1.39.0 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/opencontainers/image-spec v1.1.1 // indirect
 	github.com/opencontainers/runtime-spec v1.3.0 // indirect
@@ -354,17 +354,16 @@ require (
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.46.0 // indirect
+	golang.org/x/crypto v0.47.0 // indirect
 	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect
 	golang.org/x/mod v0.31.0 // indirect
-	golang.org/x/net v0.48.0 // indirect
+	golang.org/x/net v0.49.0 // indirect
 	golang.org/x/oauth2 v0.34.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.39.0 // indirect
-	golang.org/x/term v0.38.0 // indirect
-	golang.org/x/text v0.32.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	golang.org/x/tools v0.40.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/api v0.260.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect