chore(deps): bump the go group with 11 updates (#223)

Bumps the go group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) |
`0.37.1-flux.1` | `0.37.2-flux.1` |
| [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) |
`2.7.5` | `2.8.1` |
|
[github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller)
| `1.5.0` | `1.5.1` |
|
[github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller)
| `1.8.0` | `1.8.1` |
|
[github.com/fluxcd/notification-controller/api](https://github.com/fluxcd/notification-controller)
| `1.8.0` | `1.8.1` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.1` | `0.35.2`
|
|
[k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver)
| `0.35.1` | `0.35.2` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) |
`0.35.1` | `0.35.2` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) |
`0.35.1` | `0.35.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.1`
| `0.35.2` |
| [ocm.software/ocm](https://github.com/open-component-model/ocm) |
`0.35.0` | `0.36.0` |

Updates `github.com/fluxcd/cli-utils` from 0.37.1-flux.1 to
0.37.2-flux.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/cli-utils/commit/aeb0ebe664971ab12721caf3d2ee5197205810fc"><code>aeb0ebe</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/cli-utils/issues/23">#23</a>
from fluxcd/k8s-1.35.1</li>
<li><a
href="https://github.com/fluxcd/cli-utils/commit/655fbc43ef2e70b6258e250f43e6d002ca325428"><code>655fbc4</code></a>
Update dependencies to Kubernetes v1.35.1</li>
<li><a
href="https://github.com/fluxcd/cli-utils/commit/05291d6b9d56ab507953d61752527df3a47febde"><code>05291d6</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/cli-utils/issues/22">#22</a>
from fluxcd/fix-kstatus-polling-pending-pods</li>
<li><a
href="https://github.com/fluxcd/cli-utils/commit/28dac9039c0e3adc374433513330f0adee504f94"><code>28dac90</code></a>
fix: exclude transient pod failures from controller status</li>
<li>See full diff in <a
href="https://github.com/fluxcd/cli-utils/compare/v0.37.1-flux.1...v0.37.2-flux.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/flux2/v2` from 2.7.5 to 2.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/flux2/releases">github.com/fluxcd/flux2/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.1</h2>
<h2>Highlights</h2>
<p>Flux v2.8.1 is a patch release that comes with various fixes. Users
are encouraged to upgrade for the best experience.</p>
<p>ℹ️ Please follow the <a
href="https://github.com/fluxcd/flux2/discussions/5572">Upgrade
Procedure for Flux v2.7+</a> for a smooth upgrade from Flux v2.6 to the
latest version.</p>
<p>Fixes:</p>
<ul>
<li>Fix Git commit status events being dropped for Kustomizations
(notification-controller)</li>
<li>Fix health check for StatefulSets when the Pods are
Pending/Unschedulable during rollout (helm-controller,
kustomize-controller)</li>
</ul>
<h2>Components changelog</h2>
<ul>
<li>kustomize-controller <a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md">v1.8.1</a></li>
<li>notification-controller <a
href="https://github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md">v1.8.1</a></li>
<li>helm-controller <a
href="https://github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md">v1.5.1</a></li>
</ul>
<h2>CLI changelog</h2>
<ul>
<li>[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by
<a href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in
<a
href="https://redirect.github.com/fluxcd/flux2/pull/5735">fluxcd/flux2#5735</a></li>
<li>Update fluxcd/pkg dependencies by <a
href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in <a
href="https://redirect.github.com/fluxcd/flux2/pull/5739">fluxcd/flux2#5739</a></li>
<li>[release/v2.8.x] Update toolkit components by <a
href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in <a
href="https://redirect.github.com/fluxcd/flux2/pull/5741">fluxcd/flux2#5741</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1">https://github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1</a></p>
<h2>v2.8.0</h2>
<h2>Highlights</h2>
<p>Flux v2.8.0 is a feature release. Users are encouraged to upgrade for
the best experience.</p>
<p>For a compressive overview of new features and API changes included
in this release, please refer to the <a
href="https://fluxcd.io/blog/2026/02/flux-v2.8.0/">Announcing Flux 2.8
GA blog post</a>.</p>
<p>Overview of the new features:</p>
<ul>
<li>Helm v4 support, including server-side apply and kstatus-based
health checking (<code>HelmRelease</code>)</li>
<li>Readiness evaluation of Helm-managed objects with CEL expressions
(<code>HelmRelease</code>)</li>
<li>Improved observability of Helm releases with inventory tracking in
<code>.status.inventory</code> (<code>HelmRelease</code>)</li>
<li>Reduced the mean time to recovery of Flux-managed applications via
<code>CancelHealthCheckOnNewRevision</code> feature gate
(<code>Kustomization</code>, <code>HelmRelease</code>)</li>
<li>Support for commenting on Pull Requests directly from Flux
notifications (<code>Provider</code>)</li>
<li>Custom SSA apply stages for ordering resource application in
kustomize-controller (<code>Kustomization</code>)</li>
<li>Automatic GitHub App installation ID lookup from the repository
owner (<code>GitRepository</code>, <code>ImageUpdateAutomation</code>,
<code>Provider</code>)</li>
<li>Support for Cosign v3 for verifying OCI artifacts and container
images (<code>OCIRepository</code>)</li>
<li>ArtifactGenerator support for extracting and modifying Helm charts
(<code>ArtifactGenerator</code>)</li>
<li>Bypass cache when fetching source objects via
<code>DirectSourceFetch</code> feature gate (<code>Kustomization</code>,
<code>HelmRelease</code>, <code>ArtifactGenerator</code>)</li>
</ul>
<p>❤️ Big thanks to all the Flux contributors that helped us with this
release!</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/flux2/commit/97222a775ae8e68f1e85508f356f248704255c9c"><code>97222a7</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5741">#5741</a>
from fluxcd/backport-5740-to-release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/959025e64993eb2e2df08ffd80f41b88006e185a"><code>959025e</code></a>
Update toolkit components</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/75f5e33fd107fbab4fa63b9d19d37b996150d441"><code>75f5e33</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5739">#5739</a>
from fluxcd/update-pkg-deps/release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/79cae5d0331ad373d52aceddd28a067820c4e8e0"><code>79cae5d</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/41505fd5f3e8347228517d4f0a699249b07b6db0"><code>41505fd</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5735">#5735</a>
from fluxcd/backport-5733-to-release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/2042ddf84941821a292ccb863041ce9e25d1a418"><code>2042ddf</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/ac71dd88a3e6170a068873ea78aafe90f8c9c82c"><code>ac71dd8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5731">#5731</a>
from fluxcd/conform-min-1.33</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/c5e5dfb8aef1d379b90514897f0d3c3ff030fdea"><code>c5e5dfb</code></a>
Update conformance tests to min Kubernetes 1.33</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/6ae880501e5a22ca9efedcb3fb995e0386924731"><code>6ae8805</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5730">#5730</a>
from fluxcd/bump-min-k8s-version</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/fd547dfe42a6c3e0c01063f12083467672b39548"><code>fd547df</code></a>
Bump minimum Kubernetes version to 1.33</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/flux2/compare/v2.7.5...v2.8.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/helm-controller/api` from 1.5.0 to 1.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/helm-controller/releases">github.com/fluxcd/helm-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md">v1.5.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/helm-controller:v1.5.1</code></li>
<li><code>ghcr.io/fluxcd/helm-controller:v1.5.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md">github.com/fluxcd/helm-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.5.1</h2>
<p><strong>Release date:</strong> 2026-02-27</p>
<p>This patch release fixes health check logic for StatefulSets during
rolling updates when the Pods are Pending/Unschedulable.</p>
<p>Fixes:</p>
<ul>
<li>Fix health check logic for StatefulSets during rolling updates
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1424">#1424</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Add note about MTTR only for kstatus
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1416">#1416</a></li>
<li>Remove no longer needed workaround for Flux 2.8
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1420">#1420</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/2447764040f3ee01e5287344595a0dc717c119cd"><code>2447764</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1425">#1425</a>
from fluxcd/release-v1.5.1</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/1f42f6728f0c2563b11f79b440720401ce86487c"><code>1f42f67</code></a>
Release v1.5.1</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/727ea4c5219ccf6e14c9afde0e80b6abb32018d1"><code>727ea4c</code></a>
Add changelog entry for v1.5.1</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/73872f994cf0b4999740f74b3a5a617927d62747"><code>73872f9</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1424">#1424</a>
from fluxcd/update-pkg-deps/release/v1.5.x</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/17ffe88a2393c7d26bfa80247b26a8dab05e9fe1"><code>17ffe88</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/7568b08ca3e341de6169b98f6877db039ee28a86"><code>7568b08</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1421">#1421</a>
from fluxcd/backport-1420-to-release/v1.5.x</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/b8d57fdbad64b3e3957c8b1abea4e15751dc6803"><code>b8d57fd</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/9df94b5a478530c73d3995117b73f3783630af71"><code>9df94b5</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1417">#1417</a>
from fluxcd/backport-1416-to-release/v1.5.x</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/6f7b80291505e3cbd327344f6b4b5d8287e37764"><code>6f7b802</code></a>
Add note about MTTR only for kstatus</li>
<li>See full diff in <a
href="https://github.com/fluxcd/helm-controller/compare/v1.5.0...v1.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/kustomize-controller/api` from 1.8.0 to 1.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/releases">github.com/fluxcd/kustomize-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md">v1.8.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/kustomize-controller:v1.8.1</code></li>
<li><code>ghcr.io/fluxcd/kustomize-controller:v1.8.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md">github.com/fluxcd/kustomize-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.8.1</h2>
<p><strong>Release date:</strong> 2026-02-27</p>
<p>This patch release fixes health check logic for StatefulSets during
rolling updates when the Pods are Pending/Unschedulable.</p>
<p>Fixes:</p>
<ul>
<li>Fix health check logic for StatefulSets during rolling updates
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1602">#1602</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Improve docs for <code>.spec.force</code>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1597">#1597</a></li>
<li>Remove no longer needed workaround for Flux 2.8
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1595">#1595</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/1fbb27fb245f8ebe0ab0b853202d37e0e4249877"><code>1fbb27f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1603">#1603</a>
from fluxcd/release-v1.8.1</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/c8fd34b223dc6f2fce651ca6e024dd8d6374ea2e"><code>c8fd34b</code></a>
Release v1.8.1</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/73b248373ac93ae4afce0d0fb5d1580809621918"><code>73b2483</code></a>
Add changelog entry for v1.8.1</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/794b7017bc4b6cbd70831c2931fa99600ab63639"><code>794b701</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1602">#1602</a>
from fluxcd/update-pkg-deps/release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/ea9478f409f86b0c3d02f5a03ed19952f1a9ed90"><code>ea9478f</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/8ccbdc90f6280c1ac438836b3954c1e03e939c3a"><code>8ccbdc9</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1598">#1598</a>
from fluxcd/backport-1597-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/9d0c746eb8646b31ebdc77d9d761bbed5d98486c"><code>9d0c746</code></a>
Improve docs for .spec.force</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/4d1de8b77aae27470c6a26f12b7f764ab8c05450"><code>4d1de8b</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1596">#1596</a>
from fluxcd/backport-1595-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/628944a670f546cf96fcca5fb8209f2137766537"><code>628944a</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li>See full diff in <a
href="https://github.com/fluxcd/kustomize-controller/compare/v1.8.0...v1.8.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/notification-controller/api` from 1.8.0 to
1.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/notification-controller/releases">github.com/fluxcd/notification-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md">v1.8.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/notification-controller:v1.8.1</code></li>
<li><code>ghcr.io/fluxcd/notification-controller:v1.8.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/notification-controller/blob/main/CHANGELOG.md">github.com/fluxcd/notification-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.8.1</h2>
<p><strong>Release date:</strong> 2026-02-27</p>
<p>This patch release fixes a regression introduced in 1.8.0 where
commit
status events were dropped.</p>
<p>Fixes:</p>
<ul>
<li>Fix commit status providers requiring only commit event key
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1247">#1247</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Remove no longer needed workaround for Flux 2.8
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1244">#1244</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1250">#1250</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/52ecadcd98943eb5d976c4ee8cd9ba52819ae17a"><code>52ecadc</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1252">#1252</a>
from fluxcd/release-v1.8.1</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/50bf0fdaca39fc7ef6a59f166f031ab2c9f70fc4"><code>50bf0fd</code></a>
Release v1.8.1</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/b624974598b1cc0b9e39eee208e81a50833eb5c0"><code>b624974</code></a>
Add changelog entry for v1.8.1</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/89a1b363e1de9d7a451aadba58c9a317c418d491"><code>89a1b36</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1250">#1250</a>
from fluxcd/update-pkg-deps/release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/1c94ad34ea8d7cb6061bd56e4eefa6eecd0faf1f"><code>1c94ad3</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/24148efeeb09bc5f3c3b2e54579e92c8a3852030"><code>24148ef</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1249">#1249</a>
from fluxcd/backport-1247-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/da3292d54e5fdaa2b2bb53b63588a11654b258c2"><code>da3292d</code></a>
Fix commit status providers requiring only commit even key</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/9ff4b34525a283cc14223f3a3ab533b030546535"><code>9ff4b34</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1245">#1245</a>
from fluxcd/backport-1244-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/2692130c91d6f52e7b31fe7c4a583d4305e36ac0"><code>2692130</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li>See full diff in <a
href="https://github.com/fluxcd/notification-controller/compare/v1.8.0...v1.8.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/api` from 0.35.1 to 0.35.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/api/commit/8a137cde6e07bb0d73e40cb0bf8d7d550507989f"><code>8a137cd</code></a>
Update dependencies to v0.35.2 tag</li>
<li>See full diff in <a
href="https://github.com/kubernetes/api/compare/v0.35.1...v0.35.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/apiextensions-apiserver` from 0.35.1 to 0.35.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/apiextensions-apiserver/commit/79000f49dae559dd7c28e8fc7aad1bf2051407fc"><code>79000f4</code></a>
Update dependencies to v0.35.2 tag</li>
<li>See full diff in <a
href="https://github.com/kubernetes/apiextensions-apiserver/compare/v0.35.1...v0.35.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/apimachinery` from 0.35.1 to 0.35.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/kubernetes/apimachinery/compare/v0.35.1...v0.35.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/cli-runtime` from 0.35.1 to 0.35.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/cli-runtime/commit/81d4338e706cd22c1d19e747fdc517ffd6dc65f7"><code>81d4338</code></a>
Update dependencies to v0.35.2 tag</li>
<li>See full diff in <a
href="https://github.com/kubernetes/cli-runtime/compare/v0.35.1...v0.35.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/client-go` from 0.35.1 to 0.35.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/client-go/commit/a21b32978c420e4af7da3796bca3f37e2245856e"><code>a21b329</code></a>
Update dependencies to v0.35.2 tag</li>
<li>See full diff in <a
href="https://github.com/kubernetes/client-go/compare/v0.35.1...v0.35.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `ocm.software/ocm` from 0.35.0 to 0.36.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm/releases">ocm.software/ocm's
releases</a>.</em></p>
<blockquote>
<h2>v0.36.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>‼️ Breaking Changes</h3>
<ul>
<li>fix!: use Fulcio certificate instead of public key and upgrade
Sigstore Cosign from v2 to v3 by <a
href="https://github.com/morri-son"><code>@​morri-son</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1726">open-component-model/ocm#1726</a></li>
<li>fix: chart access artifact set media type by <a
href="https://github.com/fabianburth"><code>@​fabianburth</code></a> in
<a
href="https://redirect.github.com/open-component-model/ocm/pull/1786">open-component-model/ocm#1786</a></li>
</ul>
<h3>🚀 Features</h3>
<ul>
<li>feat: support index based reading of OCI artifacts by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1646">open-component-model/ocm#1646</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix: add --oci-layout flag for OCI Image Layout blob paths by <a
href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1723">open-component-model/ocm#1723</a></li>
<li>fix: update image reference name to use the open-component-model
organization repository by <a
href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1784">open-component-model/ocm#1784</a></li>
<li>fix(1560): add more explicit errors on get cv by <a
href="https://github.com/matthiasbruns"><code>@​matthiasbruns</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1787">open-component-model/ocm#1787</a></li>
</ul>
<h3>⬆️ Dependencies</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1728">open-component-model/ocm#1728</a></li>
<li>chore(deps): bump the go group with 18 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1734">open-component-model/ocm#1734</a></li>
<li>chore: retract 0.33.0 and 0.34.1 by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1740">open-component-model/ocm#1740</a></li>
<li>chore(deps): bump the go group with 11 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1749">open-component-model/ocm#1749</a></li>
<li>chore(deps): bump github.com/klauspost/compress by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1752">open-component-model/ocm#1752</a></li>
<li>chore(deps): bump golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1718">open-component-model/ocm#1718</a></li>
<li>chore: bump sigstore/fulcio by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1757">open-component-model/ocm#1757</a></li>
<li>chore(deps): bump the go group with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1764">open-component-model/ocm#1764</a></li>
<li>chore(deps): bump the go group with 12 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1770">open-component-model/ocm#1770</a></li>
<li>chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1774">open-component-model/ocm#1774</a></li>
<li>chore(deps): bump the go group with 6 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1778">open-component-model/ocm#1778</a></li>
<li>chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1792">open-component-model/ocm#1792</a></li>
<li>chore(deps): bump the go group with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1795">open-component-model/ocm#1795</a></li>
<li>chore(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1794">open-component-model/ocm#1794</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.36.0-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a>[bot] in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1724">open-component-model/ocm#1724</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a> made
their first contribution in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1723">open-component-model/ocm#1723</a></li>
<li><a
href="https://github.com/matthiasbruns"><code>@​matthiasbruns</code></a>
made their first contribution in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1787">open-component-model/ocm#1787</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/open-component-model/ocm/compare/v0.35...v0.36.0">https://github.com/open-component-model/ocm/compare/v0.35...v0.36.0</a></p>
<h2>v0.36.0-rc.2</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>‼️ Breaking Changes</h3>
<ul>
<li>fix!: use Fulcio certificate instead of public key and upgrade
Sigstore Cosign from v2 to v3 by <a
href="https://github.com/morri-son"><code>@​morri-son</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1726">open-component-model/ocm#1726</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm/commit/87fdfc70974da445f26b271c451baafd9e7d0c1f"><code>87fdfc7</code></a>
chore(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1794">#1794</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/ffe4118a73d1b4fa85654d23d726a1b923dd6656"><code>ffe4118</code></a>
chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1795">#1795</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/00100ff275ade63c7b0081b446889fc0f496a73c"><code>00100ff</code></a>
fix(1560): add more explicit errors on get cv (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1787">#1787</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/e98265f03918ffac3f90738099b74ba16507fe21"><code>e98265f</code></a>
chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1792">#1792</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/e18390a8c7eb1a058cc0ed1c611e61e5efaf0eee"><code>e18390a</code></a>
fix: chart access artifact set media type (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1786">#1786</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/92a409ab7ed6e3cf278453f7eb03e497ffca5903"><code>92a409a</code></a>
fix!: use Fulcio certificate instead of public key and upgrade Sigstore
Cosig...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/e4089630301ac28ba4fbadd7bbb381e6ba91c7f1"><code>e408963</code></a>
feat: support index based reading of OCI artifacts (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1646">#1646</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/7a2ada01e5c3e3888bcc5ce106aaae8959ba60f5"><code>7a2ada0</code></a>
fix: update image reference name to use the open-component-model
organization...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/2b9fa8eb03b2ceddb0df13b214b6ca4c1e596c33"><code>2b9fa8e</code></a>
chore(deps): bump actions/cache from 5.0.1 to 5.0.2 in the ci group (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1780">#1780</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/6ee834ab525af36c1204ddf04bdb0d7cc77f66bb"><code>6ee834a</code></a>
chore(deps): bump the go group with 6 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1778">#1778</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm/compare/v0.35...v0.36">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -1,6 +1,6 @@
 module github.com/open-component-model/ocm-e2e-framework
 
-go 1.25.5
+go 1.26.0
 
 replace github.com/opencontainers/go-digest => github.com/opencontainers/go-digest v1.0.1-0.20220411205349-bde1400a84be
 
@@ -11,13 +11,13 @@ replace github.com/ThalesIgnite/crypto11 => github.com/ThalesGroup/crypto11 v1.6
 
 require (
 	code.gitea.io/sdk/gitea v0.23.2
-	github.com/fluxcd/cli-utils v0.37.1-flux.1
-	github.com/fluxcd/flux2/v2 v2.7.5
-	github.com/fluxcd/helm-controller/api v1.5.0
+	github.com/fluxcd/cli-utils v0.37.2-flux.1
+	github.com/fluxcd/flux2/v2 v2.8.1
+	github.com/fluxcd/helm-controller/api v1.5.1
 	github.com/fluxcd/image-automation-controller/api v1.1.0
 	github.com/fluxcd/image-reflector-controller/api v1.1.0
-	github.com/fluxcd/kustomize-controller/api v1.8.0
-	github.com/fluxcd/notification-controller/api v1.8.0
+	github.com/fluxcd/kustomize-controller/api v1.8.1
+	github.com/fluxcd/notification-controller/api v1.8.1
 	github.com/fluxcd/pkg/apis/meta v1.25.0
 	github.com/fluxcd/pkg/runtime v0.102.0
 	github.com/fluxcd/pkg/ssa v0.69.0
@@ -27,12 +27,12 @@ require (
 	github.com/open-component-model/ocm-controller v0.28.0
 	github.com/open-component-model/replication-controller v0.13.1
 	github.com/stretchr/testify v1.11.1
-	k8s.io/api v0.35.1
-	k8s.io/apiextensions-apiserver v0.35.1
-	k8s.io/apimachinery v0.35.1
-	k8s.io/cli-runtime v0.35.1
-	k8s.io/client-go v0.35.1
-	ocm.software/ocm v0.35.0
+	k8s.io/api v0.35.2
+	k8s.io/apiextensions-apiserver v0.35.2
+	k8s.io/apimachinery v0.35.2
+	k8s.io/cli-runtime v0.35.2
+	k8s.io/client-go v0.35.2
+	ocm.software/ocm v0.36.0
 	sigs.k8s.io/controller-runtime v0.23.1
 	sigs.k8s.io/e2e-framework v0.6.0
 	sigs.k8s.io/kustomize/api v0.21.1
@@ -78,33 +78,33 @@ require (
 	github.com/alibabacloud-go/tea-xml v1.1.3 // indirect
 	github.com/aliyun/credentials-go v1.4.8 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
-	github.com/aws/aws-sdk-go-v2 v1.41.0 // indirect
+	github.com/aws/aws-sdk-go-v2 v1.41.1 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 // indirect
-	github.com/aws/aws-sdk-go-v2/config v1.32.5 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.5 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.16 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.13 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.16 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.16 // indirect
+	github.com/aws/aws-sdk-go-v2/config v1.32.7 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.7 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.21.0 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.54.2 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.4 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.17 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.55.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.9 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.6 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.16 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.93.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/signin v1.0.4 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.30.7 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.12 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.41.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.8 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.17 // indirect
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.95.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.41.6 // indirect
 	github.com/aws/smithy-go v1.24.0 // indirect
-	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.10.1 // indirect
+	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect
 	github.com/blang/semver/v4 v4.0.0 // indirect
-	github.com/buildkite/agent/v3 v3.111.0 // indirect
+	github.com/buildkite/agent/v3 v3.115.2 // indirect
 	github.com/buildkite/go-pipeline v0.16.0 // indirect
 	github.com/buildkite/interpolate v0.1.5 // indirect
 	github.com/buildkite/roko v1.4.0 // indirect
@@ -119,7 +119,7 @@ require (
 	github.com/cloudflare/cfssl v1.6.5 // indirect
 	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
-	github.com/containerd/containerd v1.7.29 // indirect
+	github.com/containerd/containerd v1.7.30 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
@@ -139,7 +139,7 @@ require (
 	github.com/digitorus/timestamp v0.0.0-20250524132541-c45532741eea // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v29.1.2+incompatible // indirect
+	github.com/docker/cli v29.1.5+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker v28.5.2+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.9.4 // indirect
@@ -156,8 +156,8 @@ require (
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fluxcd/pkg/apis/acl v0.9.0 // indirect
 	github.com/fluxcd/pkg/apis/kustomize v1.15.0 // indirect
-	github.com/fluxcd/pkg/kustomize v1.24.0 // indirect
-	github.com/fluxcd/pkg/tar v0.16.0 // indirect
+	github.com/fluxcd/pkg/kustomize v1.27.0 // indirect
+	github.com/fluxcd/pkg/tar v0.17.0 // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/fvbommel/sortorder v1.1.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
@@ -166,7 +166,7 @@ require (
 	github.com/go-errors/errors v1.5.1 // indirect
 	github.com/go-fed/httpsig v1.1.0 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
-	github.com/go-git/go-billy/v5 v5.6.2 // indirect
+	github.com/go-git/go-billy/v5 v5.7.0 // indirect
 	github.com/go-git/go-git/v5 v5.16.5 // indirect
 	github.com/go-ini/ini v1.67.0 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.3 // indirect
@@ -208,10 +208,10 @@ require (
 	github.com/google/go-containerregistry v0.20.7 // indirect
 	github.com/google/go-github/v45 v45.2.0 // indirect
 	github.com/google/go-github/v73 v73.0.0 // indirect
-	github.com/google/go-querystring v1.1.0 // indirect
+	github.com/google/go-querystring v1.2.0 // indirect
 	github.com/google/s2a-go v0.1.9 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/googleapis/enterprise-certificate-proxy v0.3.9 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.3.11 // indirect
 	github.com/googleapis/gax-go/v2 v2.16.0 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gowebpki/jcs v1.0.1 // indirect
@@ -233,7 +233,7 @@ require (
 	github.com/jinzhu/copier v0.4.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kevinburke/ssh_config v1.4.0 // indirect
-	github.com/klauspost/compress v1.18.2 // indirect
+	github.com/klauspost/compress v1.18.3 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/klauspost/pgzip v1.2.6 // indirect
 	github.com/letsencrypt/boulder v0.20251110.0 // indirect
@@ -274,7 +274,7 @@ require (
 	github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481 // indirect
 	github.com/oklog/ulid v1.3.1 // indirect
 	github.com/oleiade/reflections v1.1.0 // indirect
-	github.com/onsi/gomega v1.39.0 // indirect
+	github.com/onsi/gomega v1.39.1 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/opencontainers/image-spec v1.1.1 // indirect
 	github.com/opencontainers/runtime-spec v1.3.0 // indirect
@@ -298,14 +298,14 @@ require (
 	github.com/secure-systems-lab/go-securesystemslib v0.10.0 // indirect
 	github.com/sergi/go-diff v1.4.0 // indirect
 	github.com/shibumi/go-pathspec v1.3.0 // indirect
-	github.com/sigstore/cosign/v2 v2.6.2 // indirect
+	github.com/sigstore/cosign/v3 v3.0.4 // indirect
 	github.com/sigstore/fulcio v1.8.5 // indirect
 	github.com/sigstore/protobuf-specs v0.5.0 // indirect
 	github.com/sigstore/rekor v1.5.0 // indirect
 	github.com/sigstore/rekor-tiles/v2 v2.0.1 // indirect
 	github.com/sigstore/sigstore v1.10.4 // indirect
 	github.com/sigstore/sigstore-go v1.1.4 // indirect
-	github.com/sigstore/timestamp-authority/v2 v2.0.3 // indirect
+	github.com/sigstore/timestamp-authority/v2 v2.0.4 // indirect
 	github.com/sirupsen/logrus v1.9.4 // indirect
 	github.com/skeema/knownhosts v1.3.2 // indirect
 	github.com/spf13/afero v1.15.0 // indirect
@@ -337,14 +337,14 @@ require (
 	github.com/xeipuuv/gojsonschema v1.2.0 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
 	github.com/yuin/gopher-lua v1.1.1 // indirect
-	gitlab.com/gitlab-org/api/client-go v0.159.0 // indirect
+	gitlab.com/gitlab-org/api/client-go v1.29.0 // indirect
 	go.mongodb.org/mongo-driver v1.17.6 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
 	go.opentelemetry.io/otel v1.40.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0 // indirect
 	go.opentelemetry.io/otel/metric v1.40.0 // indirect
 	go.opentelemetry.io/otel/sdk v1.40.0 // indirect
 	go.opentelemetry.io/otel/sdk/metric v1.40.0 // indirect
@@ -354,20 +354,19 @@ require (
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.47.0 // indirect
-	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect
-	golang.org/x/mod v0.31.0 // indirect
-	golang.org/x/net v0.49.0 // indirect
-	golang.org/x/oauth2 v0.34.0 // indirect
+	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/mod v0.32.0 // indirect
+	golang.org/x/net v0.50.0 // indirect
+	golang.org/x/oauth2 v0.35.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.40.0 // indirect
-	golang.org/x/term v0.39.0 // indirect
-	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/sys v0.41.0 // indirect
+	golang.org/x/term v0.40.0 // indirect
+	golang.org/x/text v0.34.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/api v0.260.0 // indirect
+	google.golang.org/api v0.261.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260120174246-409b4a993575 // indirect
 	google.golang.org/grpc v1.78.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
@@ -377,11 +376,11 @@ require (
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	helm.sh/helm/v3 v3.19.2 // indirect
-	k8s.io/component-base v0.35.1 // indirect
+	helm.sh/helm/v3 v3.20.0 // indirect
+	k8s.io/component-base v0.35.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
-	k8s.io/kubectl v0.35.0 // indirect
+	k8s.io/kubectl v0.35.1 // indirect
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
 	oras.land/oras-go/v2 v2.6.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect