chore(deps): bump the go group with 16 updates (#1922)

Bumps the go group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) |
`1.41.5` | `1.41.6` |
|
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2)
| `1.32.14` | `1.32.16` |
|
[github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2)
| `1.19.14` | `1.19.15` |
|
[github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2)
| `0.1.15` | `0.1.17` |
|
[github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2)
| `1.57.0` | `1.57.1` |
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2)
| `1.99.0` | `1.99.1` |
|
[github.com/containerd/containerd/v2](https://github.com/containerd/containerd)
| `2.2.2` | `2.2.3` |
|
[github.com/docker/go-connections](https://github.com/docker/go-connections)
| `0.6.0` | `0.7.0` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.70.0`
| `0.71.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) |
`5.17.2` | `5.18.0` |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag)
| `0.25.5` | `0.26.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.3` | `0.35.4`
|
|
[k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver)
| `0.35.3` | `0.35.4` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) |
`0.35.3` | `0.35.4` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) |
`0.35.3` | `0.35.4` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.3`
| `0.35.4` |

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.6
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a>
Release 2026-04-17</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a>
Bump smithy-go to 1.25 (again) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a>
Release 2026-04-16</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a>
Make AccountIDEndpointRouting aware of bdd endpoints (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/v1.41.5...v1.41.6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.14 to 1.32.16
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a>
Release 2026-04-17</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a>
Bump smithy-go to 1.25 (again) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a>
Release 2026-04-16</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a>
Make AccountIDEndpointRouting aware of bdd endpoints (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.14...config/v1.32.16">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.14 to
1.19.15
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a>
Release 2026-04-17</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a>
Bump smithy-go to 1.25 (again) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a>
Release 2026-04-16</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a>
Make AccountIDEndpointRouting aware of bdd endpoints (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.14...credentials/v1.19.15">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from
0.1.15 to 0.1.17
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a>
Release 2026-04-17</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a>
Bump smithy-go to 1.25 (again) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a>
Release 2026-04-16</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a>
Make AccountIDEndpointRouting aware of bdd endpoints (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/feature/s3/transfermanager/v0.1.15...feature/s3/transfermanager/v0.1.17">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.57.0 to 1.57.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4509a600408280c8dcdbc6825ba750cf1628423d"><code>4509a60</code></a>
Release 2024-06-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0c61504d74dd81214542aae8a68993166935fa2a"><code>0c61504</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7ca59bf2c0fc11f80a59f7f0e5c7f4d7805444e3"><code>7ca59bf</code></a>
Update SDK's smithy-go dependency to v1.20.3</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe1af5ba9947870b221f0c17b92e4f6d48e318c9"><code>fe1af5b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b76404f69b8b6b2e398f9fd3f4759e36e3407353"><code>b76404f</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8ca412df63bb420ae20bf4ae198b8ea57e2aacf6"><code>8ca412d</code></a>
Release 2024-06-27</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6505a148d0d4e3a624fa5fb10c7fc4a226c9257f"><code>6505a14</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/66e5439ffbb921f031bae700e78ecea6b48b3517"><code>66e5439</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/590c9dbbfd52c9f93a2997bcca309c362d7f90e1"><code>590c9db</code></a>
Update API model</li>
<li>See full diff in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.57.0...service/s3/v1.57.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.99.0 to 1.99.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a>
Release 2026-04-17</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a>
Bump smithy-go to 1.25 (again) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a>
Release 2026-04-16</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a>
Make AccountIDEndpointRouting aware of bdd endpoints (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.99.0...service/s3/v1.99.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/containerd/containerd/v2` from 2.2.2 to 2.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/containerd/containerd/releases">github.com/containerd/containerd/v2's
releases</a>.</em></p>
<blockquote>
<h2>containerd 2.2.3</h2>
<p>Welcome to the v2.2.3 release of containerd!</p>
<p>The third patch release for containerd 2.2 contains various fixes
and updates including a security patch.</p>
<h3>Security Updates</h3>
<ul>
<li><strong>spdystream</strong>
<ul>
<li><a
href="https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2"><strong>CVE-2026-35469</strong></a></li>
</ul>
</li>
</ul>
<h3>Highlights</h3>
<h4>Container Runtime Interface (CRI)</h4>
<ul>
<li>Preserve cgroup mount options for privileged containers (<a
href="https://redirect.github.com/containerd/containerd/pull/13120">#13120</a>)</li>
<li>Ensure UpdatePodSandbox returns Unimplemented instead of a generic
error (<a
href="https://redirect.github.com/containerd/containerd/pull/13023">#13023</a>)</li>
</ul>
<h4>Go client</h4>
<ul>
<li>Handle absolute symlinks in rootfs user lookup to fix regressions
when using Go 1.24 (<a
href="https://redirect.github.com/containerd/containerd/pull/13015">#13015</a>)</li>
</ul>
<h4>Image Distribution</h4>
<ul>
<li>Enable mount manager in diff walking to fix layer extraction errors
with some snapshotters (e.g., EROFS) (<a
href="https://redirect.github.com/containerd/containerd/pull/13198">#13198</a>)</li>
<li>Apply hardening to prevent TOCTOU race during tar extraction (<a
href="https://redirect.github.com/containerd/containerd/pull/12971">#12971</a>)</li>
</ul>
<h4>Runtime</h4>
<ul>
<li>Restore support for client-mounted roots in Windows containers using
process isolation (<a
href="https://redirect.github.com/containerd/containerd/pull/13195">#13195</a>)</li>
<li>Update runc to v1.3.5 (<a
href="https://redirect.github.com/containerd/containerd/pull/13061">#13061</a>)</li>
<li>Apply absolute symlink resolution to /etc/group in OCI spec to fix
lookups on NixOS-style systems (<a
href="https://redirect.github.com/containerd/containerd/pull/13019">#13019</a>)</li>
<li>Handle absolute symlinks in rootfs user lookup to fix regressions
when using Go 1.24 (<a
href="https://redirect.github.com/containerd/containerd/pull/13015">#13015</a>)</li>
</ul>
<h4>Snapshotters</h4>
<ul>
<li>Fix bug that caused whiteouts to be ignored when parallel unpack was
used (<a
href="https://redirect.github.com/containerd/containerd/pull/13125">#13125</a>)</li>
</ul>
<p>Please try out the release binaries and report any issues at
<a
href="https://github.com/containerd/containerd/issues">https://github.com/containerd/containerd/issues</a>.</p>
<h3>Contributors</h3>
<ul>
<li>Samuel Karp</li>
<li>Sebastiaan van Stijn</li>
<li>Maksym Pavlenko</li>
<li>Chris Henzie</li>
<li>Derek McGowan</li>
<li>Paulo Oliveira</li>
<li>Henry Wang</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/containerd/containerd/commit/77c84241c7cbdd9b4eca2591793e3d4f4317c590"><code>77c8424</code></a>
Merge pull request <a
href="https://redirect.github.com/containerd/containerd/issues/13224">#13224</a>
from samuelkarp/prepare-release-2.2.3</li>
<li><a
href="https://github.com/containerd/containerd/commit/8a0f4ed5d360171d62ca625bc93f393a36241189"><code>8a0f4ed</code></a>
Prepare release notes for v2.2.3</li>
<li><a
href="https://github.com/containerd/containerd/commit/13838281d5d289e45af809a6b7efc5f3b2f64222"><code>1383828</code></a>
Merge pull request <a
href="https://redirect.github.com/containerd/containerd/issues/13217">#13217</a>
from samuelkarp/update-spdystream-2.2</li>
<li><a
href="https://github.com/containerd/containerd/commit/31bd34a064dc7136413efde09b99a2bdd14dabe9"><code>31bd34a</code></a>
update github.com/moby/spdystream v0.5.1</li>
<li><a
href="https://github.com/containerd/containerd/commit/d2c2fc32179c4898a0571c9d2063f31c9153ad5d"><code>d2c2fc3</code></a>
Merge pull request <a
href="https://redirect.github.com/containerd/containerd/issues/13197">#13197</a>
from thaJeztah/2.2_bump_compress</li>
<li><a
href="https://github.com/containerd/containerd/commit/6b3c2de6cfee512bfa11d45fc02f2353d5f20bf2"><code>6b3c2de</code></a>
Merge pull request <a
href="https://redirect.github.com/containerd/containerd/issues/13198">#13198</a>
from k8s-infra-cherrypick-robot/cherry-pick-13186-t...</li>
<li><a
href="https://github.com/containerd/containerd/commit/409f75be8791d53e2e4e96ab060d8db56fd46b1e"><code>409f75b</code></a>
diff/walking: enable mount manager</li>
<li><a
href="https://github.com/containerd/containerd/commit/1336f6c45d25c674963e5cb86ee1ea522e6f513e"><code>1336f6c</code></a>
vendor: github.com/klauspost/compress v1.18.5</li>
<li><a
href="https://github.com/containerd/containerd/commit/33e93348fa26b9a7bb733d1739eab0f802d1ac01"><code>33e9334</code></a>
Merge pull request <a
href="https://redirect.github.com/containerd/containerd/issues/13195">#13195</a>
from thaJeztah/2.2_bump_runhcs</li>
<li><a
href="https://github.com/containerd/containerd/commit/0d85aef0cbce3b654f27b61c20146e2c38ad700c"><code>0d85aef</code></a>
Merge pull request <a
href="https://redirect.github.com/containerd/containerd/issues/13196">#13196</a>
from thaJeztah/2.2_bump_hcsshim</li>
<li>Additional commits viewable in <a
href="https://github.com/containerd/containerd/compare/v2.2.2...v2.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/docker/go-connections` from 0.6.0 to 0.7.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/go-connections/commit/7997b0f0ac81b5b26ad7d3d2c02ca2e8fbc6c7d9"><code>7997b0f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/go-connections/issues/156">#156</a>
from thaJeztah/bump_go_winio</li>
<li><a
href="https://github.com/docker/go-connections/commit/329724ad4d0a0ae91c392b41a47df3d7c6475a7f"><code>329724a</code></a>
chore(deps): bump github.com/Microsoft/go-winio v0.6.2</li>
<li><a
href="https://github.com/docker/go-connections/commit/161dc9bf709385ed22c1c9665d5ef45fc333ce7e"><code>161dc9b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/go-connections/issues/155">#155</a>
from thaJeztah/pin_actions</li>
<li><a
href="https://github.com/docker/go-connections/commit/b115e42ee9f98b5f9de19a2054ae54483e84226d"><code>b115e42</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/go-connections/issues/154">#154</a>
from thaJeztah/fix_non_linux_tests</li>
<li><a
href="https://github.com/docker/go-connections/commit/4c35b2ac042020d513569f7578c52177d2b1a03e"><code>4c35b2a</code></a>
ci: pin actions to sha</li>
<li><a
href="https://github.com/docker/go-connections/commit/b4454a660b5f65feff1ae967957eae3293c85bec"><code>b4454a6</code></a>
tlsconfig: make root pool tests deterministic across platforms</li>
<li><a
href="https://github.com/docker/go-connections/commit/0819711a9938706b2f8af55cdec923fe8e71ccb4"><code>0819711</code></a>
tlsconfig: certPool: pass options as argument</li>
<li><a
href="https://github.com/docker/go-connections/commit/03296353c218966349e11c41430ffd4abdff93c3"><code>0329635</code></a>
tlsconfig: rename some vars that shadowed</li>
<li><a
href="https://github.com/docker/go-connections/commit/894d811275c2f782172ae739d170bcaad295f188"><code>894d811</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/go-connections/issues/150">#150</a>
from thaJeztah/deprecate_SystemCertPool</li>
<li><a
href="https://github.com/docker/go-connections/commit/0a1293ab5fa588c0498e1447e1d53ce95c6f3315"><code>0a1293a</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/go-connections/issues/153">#153</a>
from thaJeztah/chachacha</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/go-connections/compare/v0.6.0...v0.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/ssa` from 0.70.0 to 0.71.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/56073664a34f2e47d0a1b1347567b709e9a2bec5"><code>5607366</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1175">#1175</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a92c43f81d6c35b5d941ccbf2d322a711d1d88ad"><code>a92c43f</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/78286613d895f0bd7ac1e9df7a4bcc053073c9e2"><code>7828661</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1174">#1174</a> from
fluxcd/migrate-api-version</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/18b0e9d64ba8fa57708ef03b2f41555ac2ab5dc6"><code>18b0e9d</code></a>
ssa: introduce support for migrating API version</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9b7ca2d8e4ed4da521b6c68aa03f9c2265ff5d86"><code>9b7ca2d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1173">#1173</a> from
fluxcd/refactor-tar-idioms</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/154b6d47ee0318f70a968cfc9dc4675e6833fbc4"><code>154b6d4</code></a>
tar: deduplicate symlink copy functions</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/32f324200160086a617866ade66e79e983ea78ba"><code>32f3242</code></a>
tar: clean up untar idioms</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/e5f1d9d3257bbd484e75836c88f6e21b02539fe2"><code>e5f1d9d</code></a>
tar: fix untar correctness issues</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/05e2bd9a128ad705eeffc6f3a6691ec8bfc9a6fa"><code>05e2bd9</code></a>
tar: use WalkDir and simplify close logic</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/ad86bcd942a3f952d90d97f6cbddd0aa6cb0fab9"><code>ad86bcd</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1169">#1169</a> from
fluxcd/release-main</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/ssa/v0.70.0...ssa/v0.71.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/go-git/go-git/v5` from 5.17.2 to 5.18.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>plumbing: transport/http, Add support for followRedirects policy by
<a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/2004">go-git/go-git#2004</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0">https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264"><code>ea3e7ec</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/2004">#2004</a>
from go-git/v5-http-hardening</li>
<li><a
href="https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53"><code>bcd20a9</code></a>
plumbing: transport/http, Add support for followRedirects policy</li>
<li>See full diff in <a
href="https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/go-openapi/swag/conv` from 0.25.5 to 0.26.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-openapi/swag/releases">github.com/go-openapi/swag/conv's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.0</h2>
<h2><a href="https://github.com/go-openapi/swag/tree/v0.26.0">0.26.0</a>
- 2026-04-15</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-openapi/swag/compare/v0.25.5...v0.26.0">https://github.com/go-openapi/swag/compare/v0.25.5...v0.26.0</a></p>
<p>14 commits in this release.</p>
<hr />
<h3><!-- raw HTML omitted -->Implemented enhancements</h3>
<ul>
<li>feat(jsonname): added new json name provider more respectful of go
co… by <a href="https://github.com/fredbi"><code>@​fredbi</code></a> in
<a href="https://redirect.github.com/go-openapi/swag/pull/195">#195</a>
<a
href="https://github.com/go-openapi/swag/commit/543ed20002d199d61dfec44af19dd40a62527abb">...</a></li>
</ul>
<h3><!-- raw HTML omitted -->Documentation</h3>
<ul>
<li>doc: updated contributors file by <a
href="https://github.com/bot-go-openapi%5Bbot%5D"><code>@​bot-go-openapi[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/194">#194</a> <a
href="https://github.com/go-openapi/swag/commit/15feaa19efe1223e3309f20d24f4dec558879f03">...</a></li>
<li>doc: update discord link by <a
href="https://github.com/fredbi"><code>@​fredbi</code></a> in <a
href="https://redirect.github.com/go-openapi/swag/pull/190">#190</a> <a
href="https://github.com/go-openapi/swag/commit/2345c9127d7a9f5c02436fe43eccc8b816c976b5">...</a></li>
<li>doc: updated contributors file by <a
href="https://github.com/bot-go-openapi%5Bbot%5D"><code>@​bot-go-openapi[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/184">#184</a> <a
href="https://github.com/go-openapi/swag/commit/c255699f87780f712f56571dbb918cd9ee4dc5c4">...</a></li>
<li>docs: updated SECURITY.md by <a
href="https://github.com/fredbi"><code>@​fredbi</code></a> in <a
href="https://redirect.github.com/go-openapi/swag/pull/182">#182</a> <a
href="https://github.com/go-openapi/swag/commit/b821065d0416c37cfff671175af204e23baf6d1c">...</a></li>
</ul>
<h3><!-- raw HTML omitted -->Code quality</h3>
<ul>
<li>doc: add portable agentic instructions by <a
href="https://github.com/fredbi"><code>@​fredbi</code></a> in <a
href="https://redirect.github.com/go-openapi/swag/pull/191">#191</a> <a
href="https://github.com/go-openapi/swag/commit/544d0de3122905eb44c196ba35befaf4c08b2737">...</a></li>
</ul>
<h3><!-- raw HTML omitted -->Miscellaneous tasks</h3>
<ul>
<li>chore: prepare release v0.26.0 by <a
href="https://github.com/bot-go-openapi%5Bbot%5D"><code>@​bot-go-openapi[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/196">#196</a> <a
href="https://github.com/go-openapi/swag/commit/10f02a490ed1b131fb25ce8f8318f18326b43c86">...</a></li>
<li>chore: bump go directive to 1.25.0 by <a
href="https://github.com/fredbi"><code>@​fredbi</code></a> in <a
href="https://redirect.github.com/go-openapi/swag/pull/192">#192</a> <a
href="https://github.com/go-openapi/swag/commit/e3a465d96e5d36afe0c2502c871cd58b5aeee9ef">...</a></li>
<li>ci: fixed dependabot path by <a
href="https://github.com/fredbi"><code>@​fredbi</code></a> in <a
href="https://redirect.github.com/go-openapi/swag/pull/187">#187</a> <a
href="https://github.com/go-openapi/swag/commit/228d6ed692347699f12ae725b837ca0d7f4a58d3">...</a></li>
</ul>
<h3><!-- raw HTML omitted -->Updates</h3>
<ul>
<li>build(deps): bump the go-openapi-dependencies group across 15
directories with 2 updates by <a
href="https://github.com/dependabot%5Bbot%5D"><code>@​dependabot[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/193">#193</a> <a
href="https://github.com/go-openapi/swag/commit/be70d5e1065b8ae34976b805d2593178b263d104">...</a></li>
<li>build(deps): bump the other-dependencies group across 3 directories
with 1 update by <a
href="https://github.com/dependabot%5Bbot%5D"><code>@​dependabot[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/189">#189</a> <a
href="https://github.com/go-openapi/swag/commit/6aaa57c30fc63d6116e2f3a3d25bd2b1634286bf">...</a></li>
<li>build(deps): bump the development-dependencies group with 7 updates
by <a
href="https://github.com/dependabot%5Bbot%5D"><code>@​dependabot[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/188">#188</a> <a
href="https://github.com/go-openapi/swag/commit/524ef3228238f9704d6519a7b2fdba33bebe9975">...</a></li>
<li>build(deps): bump the go-openapi-dependencies group across 15
directories with 2 updates by <a
href="https://github.com/dependabot%5Bbot%5D"><code>@​dependabot[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/185">#185</a> <a
href="https://github.com/go-openapi/swag/commit/db7a1c43a405f275720b9109e90795bfaeaa1730">...</a></li>
<li>build(deps): bump the development-dependencies group across 2
directories with 7 updates by <a
href="https://github.com/dependabot%5Bbot%5D"><code>@​dependabot[bot]</code></a>
in <a
href="https://redirect.github.com/go-openapi/swag/pull/183">#183</a> <a
href="https://github.com/go-openapi/swag/commit/83b84750db70a7cb9657ff5e0611eb3d8bec1d4f">...</a></li>
</ul>
<hr />
<h3>People who contributed to this release</h3>
<ul>
<li><a href="https://github.com/fredbi"><code>@​fredbi</code></a></li>
</ul>
<hr />
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-openapi/swag/commit/10f02a490ed1b131fb25ce8f8318f18326b43c86"><code>10f02a4</code></a>
chore: prepare release v0.26.0</li>
<li><a
href="https://github.com/go-openapi/swag/commit/543ed20002d199d61dfec44af19dd40a62527abb"><code>543ed20</code></a>
feat(jsonname): added new json name provider more respectful of go
convention...</li>
<li><a
href="https://github.com/go-openapi/swag/commit/15feaa19efe1223e3309f20d24f4dec558879f03"><code>15feaa1</code></a>
doc: updated contributors file</li>
<li><a
href="https://github.com/go-openapi/swag/commit/be70d5e1065b8ae34976b805d2593178b263d104"><code>be70d5e</code></a>
build(deps): bump the go-openapi-dependencies group across 15
directories wit...</li>
<li><a
href="https://github.com/go-openapi/swag/commit/e3a465d96e5d36afe0c2502c871cd58b5aeee9ef"><code>e3a465d</code></a>
chore: bump go directive to 1.25.0 (<a
href="https://redirect.github.com/go-openapi/swag/issues/192">#192</a>)</li>
<li><a
href="https://github.com/go-openapi/swag/commit/544d0de3122905eb44c196ba35befaf4c08b2737"><code>544d0de</code></a>
doc: add portable agentic instructions (<a
href="https://redirect.github.com/go-openapi/swag/issues/191">#191</a>)</li>
<li><a
href="https://github.com/go-openapi/swag/commit/2345c9127d7a9f5c02436fe43eccc8b816c976b5"><code>2345c91</code></a>
doc: update discord link (<a
href="https://redirect.github.com/go-openapi/swag/issues/190">#190</a>)</li>
<li><a
href="https://github.com/go-openapi/swag/commit/6aaa57c30fc63d6116e2f3a3d25bd2b1634286bf"><code>6aaa57c</code></a>
build(deps): bump the other-dependencies group across 3 directories with
1 up...</li>
<li><a
href="https://github.com/go-openapi/swag/commit/524ef3228238f9704d6519a7b2fdba33bebe9975"><code>524ef32</code></a>
build(deps): bump the development-dependencies group with 7 updates</li>
<li><a
href="https://github.com/go-openapi/swag/commit/228d6ed692347699f12ae725b837ca0d7f4a58d3"><code>228d6ed</code></a>
ci: fixed dependabot path (<a
href="https://redirect.github.com/go-openapi/swag/issues/187">#187</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/go-openapi/swag/compare/v0.25.5...v0.26.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/api` from 0.35.3 to 0.35.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/api/commit/e8f0e9fb483afbb635f146c41a278e99cb992e00"><code>e8f0e9f</code></a>
Update dependencies to v0.35.4 tag</li>
<li><a
href="https://github.com/kubernetes/api/commit/0b2a75e363f7f2de18ac11cfcad4d7c1ac2119d0"><code>0b2a75e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/api/issues/138356">#138356</a>
from dims/update-moby-spdystream-v0.5.1-1.35</li>
<li><a
href="https://github.com/kubernetes/api/commit/e1ef9bcbd84bf40e60b158d0737686b15dc357f0"><code>e1ef9bc</code></a>
Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li>
<li>See full diff in <a
href="https://github.com/kubernetes/api/compare/v0.35.3...v0.35.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/apiextensions-apiserver` from 0.35.3 to 0.35.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/apiextensions-apiserver/commit/b0e553cdd725987f8a9555ea549165bf8d5af455"><code>b0e553c</code></a>
Update dependencies to v0.35.4 tag</li>
<li><a
href="https://github.com/kubernetes/apiextensions-apiserver/commit/c58038231fcc41bb951ff72918807a0547ba70d0"><code>c580382</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/apiextensions-apiserver/issues/138356">#138356</a>
from dims/update-moby-spdystream-v0.5.1-1.35</li>
<li><a
href="https://github.com/kubernetes/apiextensions-apiserver/commit/895a1c1a80adf7b9368e3c21bb4ab710982a0112"><code>895a1c1</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/apiextensions-apiserver/issues/138348">#138348</a>
from dashpole/update_prop_35</li>
<li><a
href="https://github.com/kubernetes/apiextensions-apiserver/commit/d25970d14ab222edce4cc50344847326cc56a67b"><code>d25970d</code></a>
Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li>
<li><a
href="https://github.com/kubernetes/apiextensions-apiserver/commit/eacefa78f61d6591607b36d938bcb67dbbdf22d6"><code>eacefa7</code></a>
update go.opentelemetry.io/otel to v1.41.0</li>
<li>See full diff in <a
href="https://github.com/kubernetes/apiextensions-apiserver/compare/v0.35.3...v0.35.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/apimachinery` from 0.35.3 to 0.35.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/475c94153755c980ba9af1ebdd8f16d11fa90f6e"><code>475c941</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/apimachinery/issues/138356">#138356</a>
from dims/update-moby-spdystream-v0.5.1-1.35</li>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/6c08bb5a49440190bd04c6a9c63595b2f6bc2984"><code>6c08bb5</code></a>
Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/45398efd5d59f22098761499068fc775aaf5ed71"><code>45398ef</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/apimachinery/issues/137927">#137927</a>
from lalitc375/cherry-pick-137864</li>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/b414b941d8cf939cc1e55842543e54a5217f6b60"><code>b414b94</code></a>
Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)</li>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/f933a4da535312701c7d277e2f041c3d7821f4c2"><code>f933a4d</code></a>
Add slice and map union member support with tests</li>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/977ad5b07f86dfd16ecb285a24ba32cb8120217b"><code>977ad5b</code></a>
Use IsZero instead of IsNil for union ratcheting check</li>
<li><a
href="https://github.com/kubernetes/apimachinery/commit/a1282302f0a18939b2788085cce1f443b201abe5"><code>a128230</code></a>
Fix union validation ratcheting when oldObj is nil</li>
<li>See full diff in <a
href="https://github.com/kubernetes/apimachinery/compare/v0.35.3...v0.35.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/cli-runtime` from 0.35.3 to 0.35.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/cli-runtime/commit/3e48915aff3179caedbe63ece66757160197621e"><code>3e48915</code></a>
Update dependencies to v0.35.4 tag</li>
<li><a
href="https://github.com/kubernetes/cli-runtime/commit/a919008cbe8353591b1fcc6475174ab09dac7904"><code>a919008</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/cli-runtime/issues/138356">#138356</a>
from dims/update-moby-spdystream-v0.5.1-1.35</li>
<li><a
href="https://github.com/kubernetes/cli-runtime/commit/fd8da9a07dc78e184c4ed9e54fc2ef82a89f1ed2"><code>fd8da9a</code></a>
Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li>
<li>See full diff in <a
href="https://github.com/kubernetes/cli-runtime/compare/v0.35.3...v0.35.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `k8s.io/client-go` from 0.35.3 to 0.35.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/client-go/commit/d43aed2afb13b0ca13dd1f209fbc7a76cd444d4d"><code>d43aed2</code></a>
Update dependencies to v0.35.4 tag</li>
<li><a
href="https://github.com/kubernetes/client-go/commit/8ebd9bb45e4e0df4169f1e13cdcd9e46c8c9b5cd"><code>8ebd9bb</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/client-go/issues/138356">#138356</a>
from dims/update-moby-spdystream-v0.5.1-1.35</li>
<li><a
href="https://github.com/kubernetes/client-go/commit/00b2f2b182ed10ee30be8d859457d39f3489e239"><code>00b2f2b</code></a>
Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li>
<li>See full diff in <a
href="https://github.com/kubernetes/client-go/compare/v0.35.3...v0.35.4">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -9,31 +9,31 @@ require (
 	github.com/Masterminds/semver/v3 v3.4.0
 	github.com/Masterminds/sprig/v3 v3.3.0
 	github.com/Shopify/toxiproxy/v2 v2.12.0
-	github.com/aws/aws-sdk-go-v2 v1.41.5
-	github.com/aws/aws-sdk-go-v2/config v1.32.14
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.14
-	github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.15
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.57.0
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.99.0
+	github.com/aws/aws-sdk-go-v2 v1.41.6
+	github.com/aws/aws-sdk-go-v2/config v1.32.16
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.15
+	github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.17
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.57.1
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1
 	github.com/chainguard-dev/git-urls v1.0.2
 	github.com/cloudflare/cfssl v1.6.5
-	github.com/containerd/containerd/v2 v2.2.2
+	github.com/containerd/containerd/v2 v2.2.3
 	github.com/containerd/errdefs v1.0.0
 	github.com/containerd/log v0.1.0
 	github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
 	github.com/distribution/reference v0.6.0
 	github.com/docker/cli v29.4.0+incompatible
-	github.com/docker/go-connections v0.6.0
+	github.com/docker/go-connections v0.7.0
 	github.com/drone/envsubst v1.0.3
 	github.com/fluxcd/cli-utils v1.0.0
-	github.com/fluxcd/pkg/ssa v0.70.0
+	github.com/fluxcd/pkg/ssa v0.71.0
 	github.com/gertd/go-pluralize v0.2.1
 	github.com/ghodss/yaml v1.0.0
 	github.com/go-git/go-billy/v5 v5.8.0
-	github.com/go-git/go-git/v5 v5.17.2
+	github.com/go-git/go-git/v5 v5.18.0
 	github.com/go-logr/logr v1.4.3
 	github.com/go-openapi/strfmt v0.26.1
-	github.com/go-openapi/swag/conv v0.25.5
+	github.com/go-openapi/swag/conv v0.26.0
 	github.com/go-test/deep v1.1.1
 	github.com/gobwas/glob v0.2.3
 	github.com/golang/mock v1.7.0-rc.1
@@ -85,11 +85,11 @@ require (
 	gopkg.in/op/go-logging.v1 v1.0.0-20160211212156-b2cb9fa56473
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v4 v4.1.4
-	k8s.io/api v0.35.3
-	k8s.io/apiextensions-apiserver v0.35.3
-	k8s.io/apimachinery v0.35.3
-	k8s.io/cli-runtime v0.35.3
-	k8s.io/client-go v0.35.3
+	k8s.io/api v0.35.4
+	k8s.io/apiextensions-apiserver v0.35.4
+	k8s.io/apimachinery v0.35.4
+	k8s.io/cli-runtime v0.35.4
+	k8s.io/client-go v0.35.4
 	oras.land/oras-go/v2 v2.6.0
 	sigs.k8s.io/controller-runtime v0.23.3
 	sigs.k8s.io/yaml v1.6.0
@@ -152,22 +152,21 @@ require (
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/ashanbrown/forbidigo/v2 v2.1.0 // indirect
 	github.com/ashanbrown/makezero/v2 v2.0.1 // indirect
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.21 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.22 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.10 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 // indirect
-	github.com/aws/aws-sdk-go-v2/service/signin v1.0.9 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 // indirect
-	github.com/aws/smithy-go v1.24.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22 // indirect
+	github.com/aws/aws-sdk-go-v2/service/signin v1.0.10 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.30.16 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.20 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.42.0 // indirect
+	github.com/aws/smithy-go v1.25.0 // indirect
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.12.0 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -270,7 +269,7 @@ require (
 	github.com/go-openapi/swag/mangling v0.25.5 // indirect
 	github.com/go-openapi/swag/netutils v0.25.5 // indirect
 	github.com/go-openapi/swag/stringutils v0.25.5 // indirect
-	github.com/go-openapi/swag/typeutils v0.25.5 // indirect
+	github.com/go-openapi/swag/typeutils v0.26.0 // indirect
 	github.com/go-openapi/swag/yamlutils v0.25.5 // indirect
 	github.com/go-openapi/validate v0.25.2 // indirect
 	github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
@@ -536,8 +535,8 @@ require (
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	honnef.co/go/tools v0.6.1 // indirect
-	k8s.io/apiserver v0.35.3 // indirect
-	k8s.io/component-base v0.35.3 // indirect
+	k8s.io/apiserver v0.35.4 // indirect
+	k8s.io/component-base v0.35.4 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	k8s.io/kubectl v0.35.3 // indirect