chore(deps): bump the go group across 1 directory with 11 updates (#1896)

Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) |
`1.41.4` | `1.41.5` |
|
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2)
| `1.32.12` | `1.32.14` |
|
[github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2)
| `0.1.10` | `0.1.14` |
|
[github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2)
| `1.56.1` | `1.56.2` |
| [github.com/docker/cli](https://github.com/docker/cli) |
`29.3.0+incompatible` | `29.3.1+incompatible` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.54.0` |
`1.54.1` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.3.0`
| `0.4.0` |
| [github.com/sigstore/cosign/v3](https://github.com/sigstore/cosign) |
`3.0.5` | `3.0.6` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.41.4 to 1.41.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/90650dd22735ab68f6089ae5c39b6614286ae9ec"><code>90650dd</code></a>
Release 2026-03-26</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/dd88818bee7d632a8b9da6e2c78ef92e23c94c62"><code>dd88818</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b662c50138bd393927871b46e84ee3483377f5be"><code>b662c50</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/500a9cb3522a0e71d798d7079ff5856b23c2cac1"><code>500a9cb</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6221102f763bd65d7e403fa62c3a1e3d39e24dc6"><code>6221102</code></a>
fix stale skew and delayed skew healing (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3359">#3359</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0a39373433a121800bc68efa743a7486eb07aa3f"><code>0a39373</code></a>
fix order of generated event header handlers (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3361">#3361</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/098f3898271e2eaaf8a92e38d1d928fb018805a6"><code>098f389</code></a>
Only generate resolveAccountID when it's required (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3360">#3360</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6ebab66428e97db0ee252fea042d56b1313cb9f6"><code>6ebab66</code></a>
Release 2026-03-25</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b2ec3beebb986a5e74e50d0c105119d84e1e934e"><code>b2ec3be</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/abc126f6b35bfe2f77e2505f6d04f8ceced971ee"><code>abc126f</code></a>
Update API model</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/v1.41.4...v1.41.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.12 to 1.32.14
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d15107640a5073c5ce53dc395210858e316d5e82"><code>d151076</code></a>
Release 2026-04-02</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e33c9a9f67577e2dd5fcd3b15b9a8a2e83683f53"><code>e33c9a9</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e06655901c88ef90432f41a7b9c92b33b4537c75"><code>e066559</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a635ee4303d8cac381be8788519a1a8bba5ccf12"><code>a635ee4</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9074b3ddace9c195f00993c8ae509bc8977a6c4c"><code>9074b3d</code></a>
Release 2026-04-01</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f6ad4c082d3a1995b9add26af4eb7553b13df252"><code>f6ad4c0</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/12a971a61d5226cd72102c66b188ae4968cb9b81"><code>12a971a</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8bd8eee331c2fa1553e57d18d5dbbf1dc83820fc"><code>8bd8eee</code></a>
chore: add additional text to CONTRIBUTING.md (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3372">#3372</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e4deb657ddb9c5d8ac36c335391aafb19034e9de"><code>e4deb65</code></a>
Release 2026-03-31</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1f758f207351302f9f4e1a2aa4c255a75d81446b"><code>1f758f2</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.12...config/v1.32.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.12 to
1.19.14
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d15107640a5073c5ce53dc395210858e316d5e82"><code>d151076</code></a>
Release 2026-04-02</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e33c9a9f67577e2dd5fcd3b15b9a8a2e83683f53"><code>e33c9a9</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e06655901c88ef90432f41a7b9c92b33b4537c75"><code>e066559</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a635ee4303d8cac381be8788519a1a8bba5ccf12"><code>a635ee4</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9074b3ddace9c195f00993c8ae509bc8977a6c4c"><code>9074b3d</code></a>
Release 2026-04-01</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f6ad4c082d3a1995b9add26af4eb7553b13df252"><code>f6ad4c0</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/12a971a61d5226cd72102c66b188ae4968cb9b81"><code>12a971a</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8bd8eee331c2fa1553e57d18d5dbbf1dc83820fc"><code>8bd8eee</code></a>
chore: add additional text to CONTRIBUTING.md (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3372">#3372</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e4deb657ddb9c5d8ac36c335391aafb19034e9de"><code>e4deb65</code></a>
Release 2026-03-31</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1f758f207351302f9f4e1a2aa4c255a75d81446b"><code>1f758f2</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/sqs/v1.19.12...credentials/v1.19.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from
0.1.10 to 0.1.14
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d15107640a5073c5ce53dc395210858e316d5e82"><code>d151076</code></a>
Release 2026-04-02</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e33c9a9f67577e2dd5fcd3b15b9a8a2e83683f53"><code>e33c9a9</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e06655901c88ef90432f41a7b9c92b33b4537c75"><code>e066559</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a635ee4303d8cac381be8788519a1a8bba5ccf12"><code>a635ee4</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9074b3ddace9c195f00993c8ae509bc8977a6c4c"><code>9074b3d</code></a>
Release 2026-04-01</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f6ad4c082d3a1995b9add26af4eb7553b13df252"><code>f6ad4c0</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/12a971a61d5226cd72102c66b188ae4968cb9b81"><code>12a971a</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8bd8eee331c2fa1553e57d18d5dbbf1dc83820fc"><code>8bd8eee</code></a>
chore: add additional text to CONTRIBUTING.md (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3372">#3372</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e4deb657ddb9c5d8ac36c335391aafb19034e9de"><code>e4deb65</code></a>
Release 2026-03-31</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1f758f207351302f9f4e1a2aa4c255a75d81446b"><code>1f758f2</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/feature/s3/transfermanager/v0.1.10...feature/s3/transfermanager/v0.1.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.56.1 to 1.56.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5a964704cb2640ed57a74b9b37a53dcda7b6b7dd"><code>5a96470</code></a>
Release 2024-12-19</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/653aa807b912e104f5e1e84e0510b4dffd76c751"><code>653aa80</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d02b239e896c5791e295c9a30a5281f56a8f7c39"><code>d02b239</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/698d709c21bc7922489aaba8c8207c9d7253c2fe"><code>698d709</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/885de40869f9bcee29ad11d60967aa0f1b571d46"><code>885de40</code></a>
Fix improper use of Printf-style functions (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/2934">#2934</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/858298a55393392fb161c5bd0ae3b9c5251996bf"><code>858298a</code></a>
Release 2024-12-18</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f58264af808a255782999422056bccb06552dcbd"><code>f58264a</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/df31082d87044a000a1524dbb654651f32713e10"><code>df31082</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/346690ed8f5b974ab26532aa93d5fa92a58d3571"><code>346690e</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/45154546e09b48505c8798f7e5f3846ee1e0453a"><code>4515454</code></a>
Release 2024-12-17</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.56.1...service/ssm/v1.56.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.97.1 to 1.98.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e4deb657ddb9c5d8ac36c335391aafb19034e9de"><code>e4deb65</code></a>
Release 2026-03-31</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1f758f207351302f9f4e1a2aa4c255a75d81446b"><code>1f758f2</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/ba7e432545fa3203d98f593b2aceaba66c02db7a"><code>ba7e432</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/607cb0afad6e6a655a356be54f9fdec5cc558a80"><code>607cb0a</code></a>
Release 2026-03-30</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a44005fd4a2e2b7308c0346da970890757aaeda5"><code>a44005f</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/dbbd8465f03f1931d85d38af45f18362cbc4c469"><code>dbbd846</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5b5c3f960e98cf024a8b7d6a6a8f0a1452e028fa"><code>5b5c3f9</code></a>
Revert &quot;drop service/internal/benchmark (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3368">#3368</a>)&quot;
(<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3369">#3369</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7ca3f9d52a718e4be3a78be0d05e6437ae362e20"><code>7ca3f9d</code></a>
drop service/internal/benchmark (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3368">#3368</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/338088bc3ce801d773863578da6a0a835d6012af"><code>338088b</code></a>
Release 2026-03-27</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f0e5f3dc09ddb548bccfc11b297229839516bff9"><code>f0e5f3d</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.97.1...service/s3/v1.98.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/docker/cli` from 29.3.0+incompatible to
29.3.1+incompatible
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/cli/commit/c2be9ccfc3cf0b4c4c4f0a3d5c91dd759ab21256"><code>c2be9cc</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6887">#6887</a> from
thaJeztah/29.x_backport_pin_actions</li>
<li><a
href="https://github.com/docker/cli/commit/0da6a5121f81387dc7eeba18f928c7e6f3d5cd9d"><code>0da6a51</code></a>
ci: pin actions to digests</li>
<li><a
href="https://github.com/docker/cli/commit/6b3ca8fc04d2c5615735f87c41b98d331a0d9fe7"><code>6b3ca8f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6884">#6884</a> from
thaJeztah/29.x_backport_missing_buildtags</li>
<li><a
href="https://github.com/docker/cli/commit/f47603c2903fcf5c7e7d8734e5bbc0ecdc04efaf"><code>f47603c</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6885">#6885</a> from
thaJeztah/29.x_backport_update_actions</li>
<li><a
href="https://github.com/docker/cli/commit/9709c8fe08f902f0aa41ffffaa00085ab39aecd8"><code>9709c8f</code></a>
build(deps): bump docker/metadata-action from 5 to 6</li>
<li><a
href="https://github.com/docker/cli/commit/af45a23fa9a06cb282294054d213b9b0fbae1ac7"><code>af45a23</code></a>
build(deps): bump docker/bake-action from 6 to 7</li>
<li><a
href="https://github.com/docker/cli/commit/bc97f5ac196f4633ffe360cfa2ab831e94dfc6f8"><code>bc97f5a</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6883">#6883</a> from
thaJeztah/29.x_backport_update_go1.25.8</li>
<li><a
href="https://github.com/docker/cli/commit/6d71967120b4cdbb556211c7a2514c42dcb2e582"><code>6d71967</code></a>
cli/command: add missing &quot;go:build&quot; comments</li>
<li><a
href="https://github.com/docker/cli/commit/9b51892b8061ff03e91e8aad41e86cad21057272"><code>9b51892</code></a>
update to go1.25.8</li>
<li>See full diff in <a
href="https://github.com/docker/cli/compare/v29.3.0...v29.3.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/moby/moby/api` from 1.54.0 to 1.54.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/moby/moby/releases">github.com/moby/moby/api's
releases</a>.</em></p>
<blockquote>
<h2>api/v1.54.1</h2>
<h3>Changelog</h3>
<ul>
<li>api/types/network: add <code>Port.Port()</code> method to return the
port-number as a string. <a
href="https://redirect.github.com/moby/moby/pull/52165">moby/moby#52165</a></li>
<li>api, client: add //go:fix inline directives to deprecated functions.
<a
href="https://redirect.github.com/moby/moby/pull/52178">moby/moby#52178</a></li>
<li>api, client: go.mod: remove patch version. <a
href="https://redirect.github.com/moby/moby/pull/52174">moby/moby#52174</a></li>
<li>api/types/network: fix handling of unmapped ports (ephemeral ports).
<a
href="https://redirect.github.com/moby/moby/pull/52288">moby/moby#52288</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/moby/moby/compare/api/v1.54.0...api/v1.54.1">https://github.com/moby/moby/compare/api/v1.54.0...api/v1.54.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moby/moby/commit/a3d12a24d680d2dccc18ff222ba560f8fef98279"><code>a3d12a2</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52293">#52293</a>
from vvoland/dropreplace</li>
<li><a
href="https://github.com/moby/moby/commit/f1b420bf02b98fb5d19459ca7302cfc8f8a91fd2"><code>f1b420b</code></a>
Drop replace rules</li>
<li><a
href="https://github.com/moby/moby/commit/ef0a1e449505837fa27d00fcdb2a2e249bb9edc9"><code>ef0a1e4</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52277">#52277</a>
from nvsahana/fix-typos-comments</li>
<li><a
href="https://github.com/moby/moby/commit/4436298e51b09725ccd11717ef51415222ef840b"><code>4436298</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52172">#52172</a>
from Wang-squirrel/dev_1</li>
<li><a
href="https://github.com/moby/moby/commit/e39d2cd99caa9fadc7166253bab4f65cf0146a7e"><code>e39d2cd</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52291">#52291</a>
from thaJeztah/update_authors_mailmap</li>
<li><a
href="https://github.com/moby/moby/commit/359ce1ca44238b67613d97a263a608308ce526c2"><code>359ce1c</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52290">#52290</a>
from thaJeztah/client_flip_args</li>
<li><a
href="https://github.com/moby/moby/commit/07a5e924ce0a1ae7f376b2932355e0a2c62c71b3"><code>07a5e92</code></a>
Fix typos and misspellings in comments, tests, and docs</li>
<li><a
href="https://github.com/moby/moby/commit/c4937534f1c790e83af16cefb37573265494cd64"><code>c493753</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52170">#52170</a>
from thaJeztah/no_mod</li>
<li><a
href="https://github.com/moby/moby/commit/6604bd0ddc7a44b6a597ac1a190b06faffd1344c"><code>6604bd0</code></a>
update AUTHORS and .mailmap</li>
<li><a
href="https://github.com/moby/moby/commit/88b79accf33a00c44cdfc3ffc6d04f8880957104"><code>88b79ac</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/52075">#52075</a>
from htoyoda18/fix/swarm-event-handling</li>
<li>Additional commits viewable in <a
href="https://github.com/moby/moby/compare/api/v1.54.0...api/v1.54.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/moby/moby/client` from 0.3.0 to 0.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/moby/moby/releases">github.com/moby/moby/client's
releases</a>.</em></p>
<blockquote>
<h2>client/v0.4.0</h2>
<h2>v0.4.0</h2>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>api, client: add <code>//go:fix inline</code> directives to
deprecated functions to help automatically migrating using <code>go
fix</code>. <a
href="https://redirect.github.com/moby/moby/pull/52178">moby/moby#52178</a></li>
<li>client/pkg/jsonmessage: add <code>DisplayStream</code> and
<code>DisplayMessages</code> utils. <a
href="https://redirect.github.com/moby/moby/pull/52273">moby/moby#52273</a></li>
<li>client/pkg/jsonmessage: use functional options for display funcs. <a
href="https://redirect.github.com/moby/moby/pull/52285">moby/moby#52285</a></li>
<li>client: prevent panic when passing <code>nil</code> Opts to
<code>client.New</code>. <a
href="https://redirect.github.com/moby/moby/pull/52184">moby/moby#52184</a></li>
<li>client: the client now sets a default User-Agent if none was set, to
prevent Go's default (<code>Go-http-client/1.1</code>) from being used.
<a
href="https://redirect.github.com/moby/moby/pull/52167">moby/moby#52167</a></li>
<li>Fix <code>/system/df</code> reporting in-use images as reclaimable.
<a
href="https://redirect.github.com/moby/moby/pull/51778">moby/moby#51778</a></li>
<li>Go SDK: client.WithHTTPHeaders now detects if duplicate headers are
set, and produces an error. Previously, duplicate errors would be
randomized, resulting in undefined behavior. <a
href="https://redirect.github.com/moby/moby/pull/52204">moby/moby#52204</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/moby/moby/compare/client/v0.3.0...client/v0.4.0">https://github.com/moby/moby/compare/client/v0.3.0...client/v0.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/moby/moby/blob/v0.4.0/CHANGELOG.md">github.com/moby/moby/client's
changelog</a>.</em></p>
<blockquote>
<h2>0.4.0 (2013-06-03)</h2>
<ul>
<li>Introducing Builder: 'docker build' builds a container, layer by
layer, from a source repository containing a Dockerfile</li>
<li>Introducing Remote API: control Docker programmatically using a
simple HTTP/json API</li>
</ul>
<ul>
<li>Runtime: various reliability and usability improvements</li>
</ul>
<h2>0.3.4 (2013-05-30)</h2>
<ul>
<li>Builder: 'docker build' builds a container, layer by layer, from a
source repository containing a Dockerfile</li>
<li>Builder: 'docker build -t FOO' applies the tag FOO to the newly
built container.</li>
<li>Runtime: interactive TTYs correctly handle window resize</li>
</ul>
<ul>
<li>Runtime: fix how configuration is merged between layers</li>
</ul>
<ul>
<li>Remote API: split stdout and stderr on 'docker run'</li>
<li>Remote API: optionally listen on a different IP and port (use at
your own risk)</li>
</ul>
<ul>
<li>Documentation: improved install instructions.</li>
</ul>
<h2>0.3.3 (2013-05-23)</h2>
<ul>
<li>Registry: Fix push regression</li>
<li>Various bugfixes</li>
</ul>
<h2>0.3.2 (2013-05-09)</h2>
<ul>
<li>Runtime: Store the actual archive on commit</li>
<li>Registry: Improve the checksum process</li>
<li>Registry: Use the size to have a good progress bar while
pushing</li>
<li>Registry: Use the actual archive if it exists in order to speed up
the push</li>
</ul>
<ul>
<li>Registry: Fix error 400 on push</li>
</ul>
<h2>0.3.1 (2013-05-08)</h2>
<ul>
<li>Builder: Implement the autorun capability within docker builder</li>
<li>Builder: Add caching to docker builder</li>
<li>Builder: Add support for docker builder with native API as top level
command</li>
<li>Runtime: Add go version to debug infos</li>
<li>Builder: Implement ENV within docker builder</li>
<li>Registry: Add docker search top level command in order to search a
repository</li>
<li>Images: output graph of images to dot (graphviz)</li>
<li>Documentation: new introduction and high-level overview</li>
<li>Documentation: Add the documentation for docker builder</li>
<li>Website: new high-level overview</li>
</ul>
<ul>
<li>Makefile: Swap &quot;go get&quot; for &quot;go get -d&quot;,
especially to compile on go1.1rc</li>
<li>Images: fix ByParent function</li>
<li>Builder: Check the command existance prior create and add Unit tests
for the case</li>
<li>Registry: Fix pull for official images with specific tag</li>
<li>Registry: Fix issue when login in with a different user and trying
to push</li>
<li>Documentation: CSS fix for docker documentation to make REST API
docs look better.</li>
<li>Documentation: Fixed CouchDB example page header mistake</li>
<li>Documentation: fixed README formatting</li>
</ul>
<ul>
<li>Registry: Improve checksum - async calculation</li>
<li>Runtime: kernel version - don't show the dash if flavor is
empty</li>
<li>Documentation: updated <a
href="http://www.docker.io">www.docker.io</a> website.</li>
<li>Builder: use any whitespaces instead of tabs</li>
<li>Packaging: packaging ubuntu; issue <a
href="https://redirect.github.com/moby/moby/issues/510">#510</a>: Use
goland-stable PPA package to build docker</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moby/moby/commit/a8ae398bf52e97148ee7bd0d5868de2e15bd297f"><code>a8ae398</code></a>
Bumped version to 0.4.0</li>
<li><a
href="https://github.com/moby/moby/commit/7a4408f608a6500cc784801616eb8c034b052e04"><code>7a4408f</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/794">#794</a> from
dotcloud/780-diff-fix2</li>
<li><a
href="https://github.com/moby/moby/commit/854039b6ba9c707af07f9966b39150ce23150920"><code>854039b</code></a>
remove TrimLeft as it's go1.1</li>
<li><a
href="https://github.com/moby/moby/commit/070923b14f734fe14bec4f0a4cd406f0101671d3"><code>070923b</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/792">#792</a> from
dotcloud/780-diff-fix</li>
<li><a
href="https://github.com/moby/moby/commit/71b1657e8d22b6dfa0a426f6244c6a3101f66bc4"><code>71b1657</code></a>
added test</li>
<li><a
href="https://github.com/moby/moby/commit/1bafe9da26c9f4671dbdf54f4a45956dd01f1d7d"><code>1bafe9d</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/793">#793</a> from
dotcloud/774-remove_login_check_on_pull-fix</li>
<li><a
href="https://github.com/moby/moby/commit/1ce4ba6c9f381f7931615644675b0cad33e74492"><code>1ce4ba6</code></a>
remove check on login</li>
<li><a
href="https://github.com/moby/moby/commit/2b1b3c1270c41a1c4c71ba2be9f33af68ea22861"><code>2b1b3c1</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/784">#784</a> from
dotcloud/remove_cgo_dependency</li>
<li><a
href="https://github.com/moby/moby/commit/8243f2510e0ff0af8df18bf0febab819529106d4"><code>8243f25</code></a>
Update test to reflect new ApiInfo struct</li>
<li><a
href="https://github.com/moby/moby/commit/0443cc351d1202063c79a4de5497878f9a9e674e"><code>0443cc3</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/moby/issues/772">#772</a> from
dotcloud/improve_version_info_cmds</li>
<li>Additional commits viewable in <a
href="https://github.com/moby/moby/compare/v0.3.0...v0.4.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/sigstore/cosign/v3` from 3.0.5 to 3.0.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.6</h2>
<h2>Changelog</h2>
<p>v3.0.6 resolves <a
href="https://github.com/sigstore/cosign/security/advisories/GHSA-w6c6-c85g-mmv6">GHSA-w6c6-c85g-mmv6</a>.
This release also adds support for signing with OpenBao-managed
keys.</p>
<ul>
<li>f1ad3ee952313be5d74a49d67ba0aa8d0d5e351f Fix DSSE predicate check
(GHSA-w6c6-c85g-mmv6) (<a
href="https://redirect.github.com/sigstore/cosign/issues/4801">#4801</a>)</li>
<li>a09afa97480a0a4a20ad6314600598b7bddc8c0c Handle whitespace-only
certificate annotation (<a
href="https://redirect.github.com/sigstore/cosign/issues/4760">#4760</a>)</li>
<li>5a38a6d3368f0286ef214c3fd81388c99b3444b8 fix(sign): closing
SignerVerifier too early when signing with a security key (<a
href="https://redirect.github.com/sigstore/cosign/issues/4761">#4761</a>)</li>
<li>2290a593c9f5b300322b83e1f2a632953aeb840c Disallow
--new-bundle-format and --rfc3161-timestamp (<a
href="https://redirect.github.com/sigstore/cosign/issues/4762">#4762</a>)</li>
<li>36f40082f3c507e131cb9d926b75b36606160483 support managed keys in
conformance testing (<a
href="https://redirect.github.com/sigstore/cosign/issues/4728">#4728</a>)</li>
<li>3274cf98c6a2c2fc12618edfa26612e8a071820a Add support for GCE
metadata server env var (<a
href="https://redirect.github.com/sigstore/cosign/issues/4732">#4732</a>)</li>
<li>2e9754aa80a54fe7062a63debe12ae2b11b87e5a fix: preserve per-layer
annotations in WriteAttestationsReferrer (<a
href="https://redirect.github.com/sigstore/cosign/issues/4709">#4709</a>)</li>
<li>dece2753067e2da18c5e0a0060e0de59fedee0b0 Fix parsing of in-toto for
string predicates</li>
<li>bd4f0fde48c16d2c55ad82acf34166a39be262a8 Mark batch of flags for
deprecation (<a
href="https://redirect.github.com/sigstore/cosign/issues/4698">#4698</a>)</li>
<li>9b259ff6b690c0f0844893016cd23c2c250124f2 disallow key and cert
identity being used together during verification (<a
href="https://redirect.github.com/sigstore/cosign/issues/4636">#4636</a>)</li>
<li>95eb1c3155b7ad11cc443c5a26f37eeede244e66 support key creation in
GitLab group (<a
href="https://redirect.github.com/sigstore/cosign/issues/4704">#4704</a>)</li>
</ul>
<h3>Thanks to all contributors!</h3>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/cosign/commit/f1ad3ee952313be5d74a49d67ba0aa8d0d5e351f"><code>f1ad3ee</code></a>
Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (<a
href="https://redirect.github.com/sigstore/cosign/issues/4801">#4801</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/2b396bdfc8668e37debe77449fc1dc707a74696e"><code>2b396bd</code></a>
chore(deps): bump gitlab.com/gitlab-org/api/client-go (<a
href="https://redirect.github.com/sigstore/cosign/issues/4757">#4757</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/eb5b1477ef826298abfd57afdbfba746d965e7fb"><code>eb5b147</code></a>
chore(deps): bump the gomod group across 1 directory with 18 updates (<a
href="https://redirect.github.com/sigstore/cosign/issues/4789">#4789</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/fb66c28fbad8238f5980c54188d0f500f1ab6e36"><code>fb66c28</code></a>
fix(deps): CVE-2026-2303 / CVE-2026-2303 (<a
href="https://redirect.github.com/sigstore/cosign/issues/4764">#4764</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/f3d74d48873468c33dfadf45132295972a0cf888"><code>f3d74d4</code></a>
Fix 'the' typo in copyright name (<a
href="https://redirect.github.com/sigstore/cosign/issues/4788">#4788</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/f4766a94d2f905398c73dc6b6e1df9c3c97a4984"><code>f4766a9</code></a>
chore(deps): bump the actions group across 1 directory with 5 updates
(<a
href="https://redirect.github.com/sigstore/cosign/issues/4784">#4784</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/4c9ba21b465b07ed03da06ebb7a5ef3e4e5913fc"><code>4c9ba21</code></a>
chore(deps): bump chainguard-dev/actions in the actions group (<a
href="https://redirect.github.com/sigstore/cosign/issues/4772">#4772</a>)</li>
<li><a
href="https://github.com/sigstore/cosign/commit/af30fe6fa838cd1f29f5ee03a90dcb781f0f3872"><code>af30fe6</code></a>
chore(deps): bump
github.com/awslabs/amazon-ecr-credential-helper/ecr-login</li>
<li><a
href="https://github.com/sigstore/cosign/commit/92084d8343055629221f1b955ae204d79bd02994"><code>92084d8</code></a>
chore(deps): bump cuelang.org/go from 0.15.4 to 0.16.0</li>
<li><a
href="https://github.com/sigstore/cosign/commit/43a96828396604e51f1b7b261f8d8dcf84c9abb1"><code>43a9682</code></a>
chore(deps): bump github.com/open-policy-agent/opa from 1.13.2 to
1.14.1</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/cosign/compare/v3.0.5...v3.0.6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/sigstore/sigstore` from 1.10.4 to 1.10.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/sigstore/releases">github.com/sigstore/sigstore's
releases</a>.</em></p>
<blockquote>
<h2>v1.10.5</h2>
<h2>What's Changed</h2>
<ul>
<li>(kms/hashivault): add openbao support in <a
href="https://redirect.github.com/sigstore/sigstore/pull/2303">sigstore/sigstore#2303</a></li>
<li>Fix typo in RSA PSS 4096 signature identifier in <a
href="https://redirect.github.com/sigstore/sigstore/pull/2270">sigstore/sigstore#2270</a></li>
<li>fix: eliminate usage of text/template in <a
href="https://redirect.github.com/sigstore/sigstore/pull/2288">sigstore/sigstore#2288</a></li>
<li>chore: mention openbao being supported as well (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2303">#2303</a>)
in <a
href="https://redirect.github.com/sigstore/sigstore/pull/2313">sigstore/sigstore#2313</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/sigstore/compare/v1.10.4...v1.10.5">https://github.com/sigstore/sigstore/compare/v1.10.4...v1.10.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/sigstore/commit/c90de3e0ff9589400dbbee639d3180b3c5ee96b6"><code>c90de3e</code></a>
chore: mention openbao being supported as well (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2313">#2313</a>)
(<a
href="https://redirect.github.com/sigstore/sigstore/issues/2313">#2313</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/b377f8f4c65ce587cba26d795dda4b48827bacb2"><code>b377f8f</code></a>
chore: Project-wide linting (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2310">#2310</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/295d6565c1b8f8ccfd3edad0b02261a8ad2fb165"><code>295d656</code></a>
build(deps): Bump the all group across 1 directory with 3 updates (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2296">#2296</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/c73103207d9c5dc8271d0c431f5b863785a016e1"><code>c731032</code></a>
(kms/hashivault): add openbao support (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2303">#2303</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/b56c8664d026358a77a52f88832759047eba7e85"><code>b56c866</code></a>
fix: eliminate usage of text/template (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2288">#2288</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/1d8faff85795ce7679df89a6d78afcc0b0185aa9"><code>1d8faff</code></a>
build(deps): Bump github.com/aws/aws-sdk-go-v2/config (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2286">#2286</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/4ac5776a42894e62e8e39cea5fcf1a4f5e295880"><code>4ac5776</code></a>
build(deps): Bump github.com/letsencrypt/boulder (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2282">#2282</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/36276e88ed3ba5b8769ce9d323ef8f9efb51156e"><code>36276e8</code></a>
build(deps): Bump golang.org/x/crypto from 0.44.0 to 0.47.0 (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2258">#2258</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/59887c9383c9348c1c49627e7fb2177231873487"><code>59887c9</code></a>
build(deps): Bump the all group across 1 directory with 2 updates (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2278">#2278</a>)</li>
<li><a
href="https://github.com/sigstore/sigstore/commit/1e854038e1ef28f8c5c247cb03755d3e1df5ebff"><code>1e85403</code></a>
build(deps): Bump dexidp/dex in /test/e2e in the all group (<a
href="https://redirect.github.com/sigstore/sigstore/issues/2279">#2279</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/sigstore/compare/v1.10.4...v1.10.5">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -8,12 +8,12 @@ require (
 	github.com/InfiniteLoopSpace/go_S-MIME v0.0.0-20181221134359-3f58f9a4b2b6
 	github.com/Masterminds/semver/v3 v3.4.0
 	github.com/Masterminds/sprig/v3 v3.3.0
-	github.com/aws/aws-sdk-go-v2 v1.41.4
-	github.com/aws/aws-sdk-go-v2/config v1.32.12
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.12
-	github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.10
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.56.1
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.97.1
+	github.com/aws/aws-sdk-go-v2 v1.41.5
+	github.com/aws/aws-sdk-go-v2/config v1.32.14
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.14
+	github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.14
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.56.2
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.98.0
 	github.com/chainguard-dev/git-urls v1.0.2
 	github.com/cloudflare/cfssl v1.6.5
 	github.com/containerd/containerd v1.7.30
@@ -22,7 +22,7 @@ require (
 	github.com/containers/image/v5 v5.36.2
 	github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
 	github.com/distribution/reference v0.6.0
-	github.com/docker/cli v29.3.0+incompatible
+	github.com/docker/cli v29.3.1+incompatible
 	github.com/docker/go-connections v0.6.0
 	github.com/drone/envsubst v1.0.3
 	github.com/fluxcd/cli-utils v0.37.2-flux.1
@@ -50,8 +50,8 @@ require (
 	github.com/mikefarah/yq/v4 v4.48.1
 	github.com/mitchellh/copystructure v1.2.0
 	github.com/moby/locker v1.0.1
-	github.com/moby/moby/api v1.54.0
-	github.com/moby/moby/client v0.3.0
+	github.com/moby/moby/api v1.54.1
+	github.com/moby/moby/client v0.4.0
 	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
 	github.com/onsi/ginkgo/v2 v2.28.1
 	github.com/onsi/gomega v1.39.1
@@ -60,9 +60,9 @@ require (
 	github.com/pkg/errors v0.9.1
 	github.com/redis/go-redis/v9 v9.18.0
 	github.com/rogpeppe/go-internal v1.14.1
-	github.com/sigstore/cosign/v3 v3.0.5
+	github.com/sigstore/cosign/v3 v3.0.6
 	github.com/sigstore/rekor v1.5.1
-	github.com/sigstore/sigstore v1.10.4
+	github.com/sigstore/sigstore v1.10.5
 	github.com/sirupsen/logrus v1.9.4
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
@@ -150,23 +150,23 @@ require (
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/ashanbrown/forbidigo/v2 v2.1.0 // indirect
 	github.com/ashanbrown/makezero/v2 v2.0.1 // indirect
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.7 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.21 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.21 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.2 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.10 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.12 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.20 // indirect
-	github.com/aws/aws-sdk-go-v2/service/signin v1.0.8 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.30.13 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.41.9 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 // indirect
+	github.com/aws/aws-sdk-go-v2/service/signin v1.0.9 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 // indirect
 	github.com/aws/smithy-go v1.24.2 // indirect
-	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 // indirect
+	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.12.0 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/bkielbasa/cyclop v1.2.3 // indirect
@@ -177,7 +177,7 @@ require (
 	github.com/bombsimon/wsl/v5 v5.1.1 // indirect
 	github.com/breml/bidichk v0.3.3 // indirect
 	github.com/breml/errchkjson v0.4.1 // indirect
-	github.com/buildkite/agent/v3 v3.115.4 // indirect
+	github.com/buildkite/agent/v3 v3.118.0 // indirect
 	github.com/buildkite/go-pipeline v0.16.0 // indirect
 	github.com/buildkite/interpolate v0.1.5 // indirect
 	github.com/buildkite/roko v1.4.0 // indirect
@@ -198,13 +198,12 @@ require (
 	github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 // indirect
 	github.com/ckaznocha/intrange v0.3.1 // indirect
 	github.com/clbanning/mxj/v2 v2.7.0 // indirect
-	github.com/clipperhouse/stringish v0.1.1 // indirect
-	github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
+	github.com/clipperhouse/uax29/v2 v2.6.0 // indirect
 	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
 	github.com/containerd/platforms v0.2.1 // indirect
-	github.com/containerd/stargz-snapshotter/estargz v0.18.1 // indirect
+	github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
 	github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
 	github.com/containers/ocicrypt v1.2.1 // indirect
 	github.com/containers/storage v1.59.1 // indirect
@@ -223,7 +222,7 @@ require (
 	github.com/dlclark/regexp2 v1.11.5 // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker v28.5.2+incompatible // indirect
-	github.com/docker/docker-credential-helpers v0.9.4 // indirect
+	github.com/docker/docker-credential-helpers v0.9.5 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a // indirect
@@ -299,10 +298,10 @@ require (
 	github.com/golangci/swaggoswag v0.0.0-20250504205917-77f2aca3143e // indirect
 	github.com/golangci/unconvert v0.0.0-20250410112200-a129a6e6413e // indirect
 	github.com/google/btree v1.1.3 // indirect
-	github.com/google/certificate-transparency-go v1.3.2 // indirect
+	github.com/google/certificate-transparency-go v1.3.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/google/go-containerregistry v0.20.7 // indirect
+	github.com/google/go-containerregistry v0.21.3 // indirect
 	github.com/google/go-github/v73 v73.0.0 // indirect
 	github.com/google/go-querystring v1.2.0 // indirect
 	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 // indirect
@@ -330,7 +329,7 @@ require (
 	github.com/huandu/xstrings v1.5.0 // indirect
 	github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b // indirect
 	github.com/in-toto/attestation v1.1.2 // indirect
-	github.com/in-toto/in-toto-golang v0.9.0 // indirect
+	github.com/in-toto/in-toto-golang v0.10.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
 	github.com/jedisct1/go-minisign v0.0.0-20241212093149-d2f9f49435c7 // indirect
@@ -357,7 +356,7 @@ require (
 	github.com/ldez/tagliatelle v0.7.1 // indirect
 	github.com/ldez/usetesting v0.5.0 // indirect
 	github.com/leonklingele/grouper v1.1.2 // indirect
-	github.com/letsencrypt/boulder v0.20251110.0 // indirect
+	github.com/letsencrypt/boulder v0.20260223.0 // indirect
 	github.com/lib/pq v1.10.9 // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/lucasb-eyer/go-colorful v1.3.0 // indirect
@@ -440,9 +439,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/sigstore/fulcio v1.8.5 // indirect
 	github.com/sigstore/protobuf-specs v0.5.0 // indirect
-	github.com/sigstore/rekor-tiles/v2 v2.2.0 // indirect
+	github.com/sigstore/rekor-tiles/v2 v2.2.1 // indirect
 	github.com/sigstore/sigstore-go v1.1.4 // indirect
-	github.com/sigstore/timestamp-authority/v2 v2.0.4 // indirect
+	github.com/sigstore/timestamp-authority/v2 v2.0.5 // indirect
 	github.com/sivchari/containedctx v1.0.3 // indirect
 	github.com/skeema/knownhosts v1.3.2 // indirect
 	github.com/sonatard/noctx v0.4.0 // indirect
@@ -493,7 +492,7 @@ require (
 	github.com/yuin/gopher-lua v1.1.1 // indirect
 	github.com/yusufpapurcu/wmi v1.2.4 // indirect
 	gitlab.com/bosi/decorder v0.4.2 // indirect
-	gitlab.com/gitlab-org/api/client-go v1.25.0 // indirect
+	gitlab.com/gitlab-org/api/client-go v1.46.0 // indirect
 	go-simpler.org/musttag v0.13.1 // indirect
 	go-simpler.org/sloglint v0.11.1 // indirect
 	go.augendre.info/arangolint v0.2.0 // indirect
@@ -515,17 +514,17 @@ require (
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	golang.org/x/exp/typeparams v0.0.0-20250620022241-b7579e27df2b // indirect
-	golang.org/x/mod v0.33.0 // indirect
+	golang.org/x/mod v0.34.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0 // indirect
-	golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 // indirect
+	golang.org/x/telemetry v0.0.0-20260311193753-579e4da9a98c // indirect
 	golang.org/x/term v0.41.0 // indirect
-	golang.org/x/time v0.14.0 // indirect
-	golang.org/x/tools v0.42.0 // indirect
+	golang.org/x/time v0.15.0 // indirect
+	golang.org/x/tools v0.43.0 // indirect
 	google.golang.org/api v0.269.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260203192932-546029d2fa20 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d // indirect
-	google.golang.org/grpc v1.79.3 // indirect
+	google.golang.org/grpc v1.80.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
@@ -545,7 +544,7 @@ require (
 	sigs.k8s.io/kustomize/api v0.21.1 // indirect
 	sigs.k8s.io/kustomize/kyaml v0.21.1 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/release-utils v0.12.3 // indirect
+	sigs.k8s.io/release-utils v0.12.4 // indirect
 	sigs.k8s.io/structured-merge-diff/v6 v6.3.2-0.20260122202528-d9cc6641c482 // indirect
 )