chore(deps): bump the go group with 18 updates

[dependabot]

Bumps the go group with 18 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.41.7	1.41.12
github.com/aws/aws-sdk-go-v2/config	1.32.17	1.32.23
github.com/aws/aws-sdk-go-v2/credentials	1.19.16	1.19.22
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	0.1.21	0.2.8
github.com/aws/aws-sdk-go-v2/service/ecr	1.57.2	1.58.3
github.com/aws/aws-sdk-go-v2/service/s3	1.101.0	1.103.2
github.com/docker/cli	29.5.0+incompatible	29.5.3+incompatible
github.com/fluxcd/pkg/ssa	0.74.0	0.75.0
github.com/go-openapi/strfmt	0.26.2	0.26.3
github.com/onsi/ginkgo/v2	2.28.3	2.29.0
github.com/onsi/gomega	1.40.0	1.41.0
github.com/redis/go-redis/v9	9.19.0	9.20.0
github.com/rogpeppe/go-internal	1.14.1	1.15.0
github.com/sigstore/rekor	1.5.1	1.5.2
github.com/sigstore/sigstore	1.10.6	1.10.8
go.podman.io/image/v5	5.39.2	5.40.0
golang.org/x/crypto	0.51.0	0.52.0
golang.org/x/net	0.54.0	0.55.0

Updates github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.41.12

Commits

• 7146c2b Release 2026-06-04
• 5aef2fd Regenerated Clients
• f94c044 Update API model
• f00b205 bump to smithy-go v1.27.1 (#3434)
• c4ad7de drop service/internal/benchmark (#3433)
• 91eca46 Release 2026-06-03.2
• e9d9e15 Regenerated Clients
• def6a3a Update API model
• fa369bd Release 2026-06-03
• 960ee4d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.23

Commits

• 7146c2b Release 2026-06-04
• 5aef2fd Regenerated Clients
• f94c044 Update API model
• f00b205 bump to smithy-go v1.27.1 (#3434)
• c4ad7de drop service/internal/benchmark (#3433)
• 91eca46 Release 2026-06-03.2
• e9d9e15 Regenerated Clients
• def6a3a Update API model
• fa369bd Release 2026-06-03
• 960ee4d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.16 to 1.19.22

Commits

• 7146c2b Release 2026-06-04
• 5aef2fd Regenerated Clients
• f94c044 Update API model
• f00b205 bump to smithy-go v1.27.1 (#3434)
• c4ad7de drop service/internal/benchmark (#3433)
• 91eca46 Release 2026-06-03.2
• e9d9e15 Regenerated Clients
• def6a3a Update API model
• fa369bd Release 2026-06-03
• 960ee4d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.1.21 to 0.2.8

Commits

• ba08dc9 Release 2026-06-05.2
• 9a67e21 Revert schema serde (#3442)
• 51692f8 s3/transfermanager: avoid double-closing concurrentReader channel after read ...
• f696d5b Release 2026-06-05
• 7efb8fd Regenerated Clients
• 1a420c5 Update endpoints model
• c0287a0 Update API model
• 2e3344c Fix tmv2 flaky test to avoid double closing test channel (#3437)
• fcf032c Release 2026-06-04.2
• cbec988 fix serialization of @​required value types (#3438)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.57.2 to 1.58.3

Commits

• 5102c2e Release 2024-08-02
• 001b1fd Regenerated Clients
• 0897137 Update API model
• a274795 add assurance tests for auth scheme select (#2730)
• 2d43bf8 Release 2024-08-01
• 5bd193d Regenerated Clients
• 5954703 Update API model
• 0c73d2b Release 2024-07-30
• 3102b1f Regenerated Clients
• 348b939 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.103.2

Commits

• 7146c2b Release 2026-06-04
• 5aef2fd Regenerated Clients
• f94c044 Update API model
• f00b205 bump to smithy-go v1.27.1 (#3434)
• c4ad7de drop service/internal/benchmark (#3433)
• 91eca46 Release 2026-06-03.2
• e9d9e15 Regenerated Clients
• def6a3a Update API model
• fa369bd Release 2026-06-03
• 960ee4d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/docker/cli from 29.5.0+incompatible to 29.5.3+incompatible

Commits

• d1c06ef Merge pull request #7022 from mickael-docker/docs-request-field
• 7dd053b Merge pull request #7003 from thaJeztah/logs_links
• 37c3d31 Merge pull request #7024 from thaJeztah/add_zizmor
• 45f10f2 Merge pull request #7025 from vvoland/update-go
• b458dc9 update to go1.26.4
• 1953194 gha: apply zizmor fixes
• ac0419e gha: add zizmor workflow
• 1aa0416 docs: recommend default deny and clarify requesturi field
• 3a85952 Merge pull request #7020 from thaJeztah/full_semver
• 8d3fbdf Merge pull request #7019 from thaJeztah/dependabot_labels
• Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/ssa from 0.74.0 to 0.75.0

Commits

• 6ed3eba Merge pull request #1225 from fluxcd/release-main
• e260187 Prepare for release
• 02551b1 Merge pull request #1221 from fluxcd/jwt-from-func
• 0915954 auth/utils/cijwt: introduce WithHostTokenFunc
• 67dcea0 Merge pull request #1220 from fluxcd/jwt-from-path
• c701c72 auth/utils/cijwt: introduce WithHostTokenFile
• 1772891 Merge pull request #1224 from dipti-pai/add-driftignorerules-to-diffoptions
• 0a3e4fc Add DriftIgnoreRules to DiffOptions for drift detection
• 2b9f4c5 Merge pull request #1216 from fluxcd/release-main
• 715a46d Prepare for release
• Additional commits viewable in compare view

Updates github.com/go-openapi/strfmt from 0.26.2 to 0.26.3

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.26.3

0.26.3 - 2026-05-31

Full Changelog: go-openapi/strfmt@v0.26.2...v0.26.3

15 commits in this release.

---

Documentation

• fix(ci): typo in sha by @​fredbi ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #258 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #251 ...

Miscellaneous tasks

• chore: prepare release v0.26.3 by @​bot-go-openapi[bot] in #260 ...
• fix(ci): monitor - work around dependabot identity requirements by @​fredbi ...
• fix(ci): updated shared ci worflows (fix monitor-bot identity) by @​fredbi ...
• fix(ci): updated shared ci worflows (fix monitor-bot permissions) by @​fredbi ...
• fix(ci): updated shared ci worflows (fix monitor-bot filter) by @​fredbi in #259 ...
• ci: schedule bot PR monitoring by @​fredbi in #257 ...

Updates

• build(deps): bump the other-dependencies group across 3 directories with 2 updates by @​dependabot[bot] in #252 ...
• build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 in the golang-org-dependencies group across 1 directory by @​dependabot[bot] in #255 ...
• build(deps): bump the go-openapi-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #256 ...
• build(deps): bump the development-dependencies group with 8 updates by @​dependabot[bot] in #254 ...
• build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 in the golang-org-dependencies group across 1 directory by @​dependabot[bot] in #253 ...
• build(deps): bump the go-openapi-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #249 ...

---

People who contributed to this release

• @​fredbi

---

strfmt license terms

[][license-url]

... (truncated)

Commits

• d93543f chore: prepare release v0.26.3
• 7841767 build(deps): bump the other-dependencies group across 3 directories with 2 up...
• f041a88 build(deps): bump golang.org/x/net
• 6ac9968 build(deps): bump the go-openapi-dependencies group across 2 directories with...
• 1d31844 fix(ci): monitor - work around dependabot identity requirements
• 1531efc fix(ci): typo in sha
• cb7dd25 fix(ci): updated shared ci worflows (fix monitor-bot identity)
• 62db01a fix(ci): updated shared ci worflows (fix monitor-bot permissions)
• c7cf6fb fix(ci): updated shared ci worflows (fix monitor-bot filter) (#259)
• c2e3626 doc: updated contributors file
• Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.29.0

2.29.0

GinkgoHelperGo makes it easier to write test helpers that need to run in goroutines. Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.

ginkgo outline now includes entries defined in DescribeTableSubtree

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.29.0

GinkgoHelperGo makes it easier to write test helpers that need to run in goroutines. Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.

ginkgo outline now includes entries defined in DescribeTableSubtree

Commits

• 04b5bcb v2.29.0
• 124232a docs: GinkgoHelperGo
• ad9cee8 feat: GinkgoHelperGo, with integration tests
• 9e56a0a chore: refactor devcontainer for better maintenance
• 3d235a9 chore: ignore internal/tmp_*/ integration suite temporary dirs
• 782666a feat: devcontainer configuration with local pkgsite and GH pages
• 009dd04 Support DescribeTableSubtree in ginkgo outline
• See full diff in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.41.0

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• af2bccb v1.41.0
• 73e81f6 v1.41.0 (full)
• e35a84f feat: devcontainer configuration with local pkgsite and GH pages
• f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
• e14831f Add optionalDescription docs to AsyncAssertion and Assertion interfaces
• 344b94d Add BeASlice and BeAnArray matchers
• See full diff in compare view

Updates github.com/redis/go-redis/v9 from 9.19.0 to 9.20.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.20.0

🚀 Highlights

Redis 8.8 Support

This release adds support for Redis 8.8. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the 8.8 client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).

Coverage for the new commands that ship in the 8.x line, rounded out in this release:

• AR* array data type (#3813) — new array data structure, exposed via the ArrayCmdable interface (see the experimental-features highlight below).
• INCREX (#3816) — atomic increment with expiration in a single round-trip.
• XNACK (#3790) — explicit negative-acknowledge of pending stream entries.
• XAUTOCLAIM PEL deletes (#3798) — XAUTOCLAIM/XAUTOCLAIMJUSTID now return the list of deleted message IDs from the pending entries list.
• TS.RANGE multiple aggregators (#3791) — TS.RANGE/TS.REVRANGE/TS.MRANGE/TS.MREVRANGE accept multiple aggregators in a single call.
• Z(UNION|INTER|DIFF) COUNT aggregator (#3802) — COUNT reducer for sorted-set set operations.
• JSON.SET FPHA (#3797) — new FPHA argument that specifies the floating-point type for homogeneous FP arrays.

CI image bump (#3814) by @​ofekshenawa. Command coverage contributions by @​cxljs, @​elena-kolevska, @​Khukharr, @​ndyakov, and @​ofekshenawa.

Stable RESP3 for RediSearch (UnstableResp3 deprecated)

FT.SEARCH, FT.AGGREGATE, FT.INFO, FT.SPELLCHECK, and FT.SYNDUMP now parse RESP3 (map) responses into the same typed result objects as RESP2 — Val() and Result() work uniformly on both protocols, no flag required. Previously, RESP3 search responses required UnstableResp3: true and were returned as opaque maps accessible only via RawResult() / RawVal().

As a result, the UnstableResp3 option is now a no-op across every options struct (Options, ClusterOptions, UniversalOptions, FailoverOptions, RingOptions) and has been marked // Deprecated:. The field is retained for backwards compatibility — existing code that sets UnstableResp3: true will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. RawResult() / RawVal() continue to work for callers that prefer the raw RESP payload.

(#3741) by @​ndyakov

Experimental Array Data Structure Commands

Adds an experimental ArrayCmdable interface with the AR* command family (ARSet, ARGet, ARGetRange, ARMSet, ARMGet, ARDel, ARDelRange, ARScan, ARSeek, ARNext, ARLastItems, ARGrep, ARGrepWithValues, ARInfo/ARInfoFull, and typed reducers AROpSum/AROpMin/AROpMax/AROpAnd/AROpOr/AROpXor/AROpMatch/AROpUsed) for working with Redis 8.8's new array data type. API is experimental and may change in a future release.

(#3813) by @​cxljs

✨ New Features

• RESP3 search parser: First-class RESP3 parsing for FT.SEARCH/FT.AGGREGATE/FT.INFO/FT.SPELLCHECK/FT.SYNDUMP responses with backwards compatibility for RESP2 (#3741) by @​ndyakov
• INCREX: New INCREX command support — atomic increment with expiration (#3816) by @​ndyakov
• XNACK: Client support for the XNACK stream command for explicitly negative-acknowledging pending entries (#3790) by @​elena-kolevska
• TS range multiple aggregators: TS.RANGE/TS.REVRANGE/TS.MRANGE/TS.MREVRANGE now accept multiple aggregators in a single call (#3791) by @​elena-kolevska
• XAutoClaim deleted IDs: XAUTOCLAIM/XAUTOCLAIMJUSTID now return the list of deleted message IDs from the PEL (#3798) by @​Khukharr
• JSON.SET FPHA: JSON.SET accepts a new FPHA argument that specifies the floating-point type for homogeneous floating-point arrays (#3797) by @​ndyakov
• Sorted-set union/intersection COUNT: ZUNION/ZINTER/ZDIFF aggregator now supports COUNT (#3802) by @​ofekshenawa
• FT.HYBRID vector validation: Validates hybrid-search vector input types and adds proper typed vector parameters (#3756) by @​DengY11
• Cluster pool wait stats: ClusterClient.PoolStats() now accumulates WaitCount and WaitDurationNs across all node pools (previously always zero) (#3809) by @​LINKIWI

🐛 Bug Fixes

• TLS-only Cluster PubSub: CLUSTER SLOTS port-0 entries now fall back to the origin endpoint's port, fixing dial tcp <ip>:0: connection refused on TLS-only clusters started with --port 0 --tls-port <port> (fixes #3726) (#3828) by @​ndyakov
• Sharded PubSub reconnect routing: PubSub.conn() now passes both regular (c.channels) and sharded (c.schannels) channels into the per-PubSub newConn closure. Previously, ClusterClient.SSubscribe-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the SSUBSCRIBE was sent to the wrong shard, and the resulting MOVED reply was silently dropped (#3829) by @​ndyakov
• ClusterClient Watch retry: User errors returned from a Watch callback are no longer subjected to cluster-retry classification; transient cluster errors still retry, but a callback returning e.g. net.ErrClosed short-circuits immediately (#3821) by @​obiyang

... (truncated)

Changelog

Sourced from github.com/redis/go-redis/v9's changelog.

9.20.0 (2026-05-28)

🚀 Highlights

Redis 8.8 Support

This release adds support for Redis 8.8. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the 8.8-rc1 client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose).

Coverage for the new commands that ship in the 8.x line, rounded out in this release:

• AR* array data type (#3813) — new array data structure, exposed via the ArrayCmdable interface (see the experimental-features highlight below).
• INCREX (#3816) — atomic increment with expiration in a single round-trip.
• XNACK (#3790) — explicit negative-acknowledge of pending stream entries.
• XAUTOCLAIM PEL deletes (#3798) — XAUTOCLAIM/XAUTOCLAIMJUSTID now return the list of deleted message IDs from the pending entries list.
• TS.RANGE multiple aggregators (#3791) — TS.RANGE/TS.REVRANGE/TS.MRANGE/TS.MREVRANGE accept multiple aggregators in a single call.
• Z(UNION|INTER|DIFF) COUNT aggregator (#3802) — COUNT reducer for sorted-set set operations.
• JSON.SET FPHA (#3797) — new FPHA argument that specifies the floating-point type for homogeneous FP arrays.

CI image bump (#3814) by @​ofekshenawa. Command coverage contributions by @​cxljs, @​elena-kolevska, @​Khukharr, @​ndyakov, and @​ofekshenawa.

Stable RESP3 for RediSearch (UnstableResp3 deprecated)

FT.SEARCH, FT.AGGREGATE, FT.INFO, FT.SPELLCHECK, and FT.SYNDUMP now parse RESP3 (map) responses into the same typed result objects as RESP2 — Val() and Result() work uniformly on both protocols, no flag required. Previously, RESP3 search responses required UnstableResp3: true and were returned as opaque maps accessible only via RawResult() / RawVal().

As a result, the UnstableResp3 option is now a no-op across every options struct (Options, ClusterOptions, UniversalOptions, FailoverOptions, RingOptions) and has been marked // Deprecated:. The field is retained for backwards compatibility — existing code that sets UnstableResp3: true will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. RawResult() / RawVal() continue to work for callers that prefer the raw RESP payload.

(#3741) by @​ndyakov

Experimental Array Data Structure Commands

Adds an experimental ArrayCmdable interface with the AR* command family (ARSet, ARGet, ARGetRange, ARMSet, ARMGet, ARDel, ARDelRange, ARScan, ARSeek, ARNext, ARLastItems, ARGrep, ARGrepWithValues, ARInfo/ARInfoFull, and typed reducers AROpSum/AROpMin/AROpMax/AROpAnd/AROpOr/AROpXor/AROpMatch/AROpUsed) for working with Redis 8.8's new array data type. API is experimental and may change in a future release.

(#3813) by @​cxljs

✨ New Features

• RESP3 search parser: First-class RESP3 parsing for FT.SEARCH/FT.AGGREGATE/FT.INFO/FT.SPELLCHECK/FT.SYNDUMP responses with backwards compatibility for RESP2 (#3741) by @​ndyakov
• INCREX: New INCREX command support — atomic increment with expiration (#3816) by @​ndyakov
• XNACK: Client support for the XNACK stream command for explicitly negative-acknowledging pending entries (#3790) by @​elena-kolevska
• TS range multiple aggregators: TS.RANGE/TS.REVRANGE/TS.MRANGE/TS.MREVRANGE now accept multiple aggregators in a single call (#3791) by @​elena-kolevska
• XAutoClaim deleted IDs: XAUTOCLAIM/XAUTOCLAIMJUSTID now return the list of deleted message IDs from the PEL (#3798) by @​Khukharr
• JSON.SET FPHA: JSON.SET accepts a new FPHA argument that specifies the floating-point type for homogeneous floating-point arrays (#3797) by @​ndyakov
• Sorted-set union/intersection COUNT: ZUNION/ZINTER/ZDIFF aggregator now supports COUNT (#3802) by @​ofekshenawa
• FT.HYBRID vector validation: Validates hybrid-search vector input types and adds proper typed vector parameters (#3756) by @​DengY11
• Cluster pool wait stats: ClusterClient.PoolStats() now accumulates WaitCount and WaitDurationNs across all node pools (previously always zero) (#3809) by @​LINKIWI

🐛 Bug Fixes

• TLS-only Cluster PubSub: CLUSTER SLOTS port-0 entries now fall back to the origin endpoint's port, fixing dial tcp <ip>:0: connection refused on TLS-only clusters started with --port 0 --tls-port <port> (fixes #3726) (#3828) by @​ndyakov
• Sharded PubSub reconnect routing: PubSub.conn() now passes both regular (c.channels) and sharded (c.schannels) channels into the per-PubSub newConn closure. Previously, ClusterClient.SSubscribe-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the SSUBSCRIBE was sent to the wrong shard, and the resulting MOVED reply was silently dropped (#3829) by @​ndyakov

... (truncated)

Commits

• 7d05dd3 chore(release): v9.20.0 (#3832)
• 9756882 fix(test): make waitForSentinelClusterStable robust to disconnected r… (#3830)
• 875ce21 fix(sentinel): do not close sentinel when replica list is empty (#3795)
• 8a027f2 chore(ci): add govulncheck workflow (#3779)
• d8407df fix(pubsub): include shard channels in newConn routing list (#3829)
• 6af9bdc fix(cluster): fall back to origin port when CLUSTER SLOTS reports port 0 (#3828)
• fa5aa8c chore(doc): Update README and CI image. (#3822)
• fdcc6f9 refactor(keyPos): Enhance key position retrieval with CommandInfo caching (#3...
• 68a8bc1 fix(sentinel): close non-winning sentinel clients in MasterAddr concurrent pr...
• 00bf6d3 fix: avoid retrying ClusterClient Watch callback errors (#3821)
• Additional commits viewable in compare view

Updates github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0

Release notes

Sourced from github.com/rogpeppe/go-internal's releases.

v1.15.0

What's Changed

• hash: do not salt with Go runtime version by @​rogpeppe in rogpeppe/go-internal#292
• testscript: reset verbose on new blocks by @​myitcv in rogpeppe/go-internal#293
• testscript: rewind last block if it was not in error by @​myitcv in rogpeppe/go-internal#294
• testscript: protect against no-op uses of cmp by @​mvdan in rogpeppe/go-internal#295
• goproxytest: add Setup by @​rogpeppe in rogpeppe/go-internal#303
• update Go, fix, add /@latest to goproxytest by @​mvdan in rogpeppe/go-internal#302
• internal/vcs: remove SYSTEMROOT workaround for Windows by @​mvdan in rogpeppe/go-internal#299
• goproxytest: add overlay capability by @​rogpeppe in rogpeppe/go-internal#304

Full Changelog: rogpeppe/go-internal@v1.14.1...v1.15.0

Commits

• 8b1dcd4 goproxytest: make .mod and .info files optional
• 02e5dd4 goproxytest: add overlay capability (#304)
• 3030644 internal/vcs: remove SYSTEMROOT workaround for Windows
• a4c00dc goproxytest: handle /@​latest endpoint
• 19311e8 all: go fix ./...
• 74d1312 test on Go 1.25 and 1.26
• aa1b1e2 goproxytest: add Setup (#303)
• 5223eff testscript: protect against no-op uses of cmp
• ee70938 testscript: rewind last block if it was not in error
• a4ecbfb testscript: add a non-failing block to the end of logging tests
• Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.5.1 to 1.5.2

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.5.2

Changelog

• 759b98e2a7c39ea9779b6a51299c5f0f987f8802 alpine: Enforce max size limit on decompression (#2831)
• c7e77ee26edd8631dd417166907093a9f13b85e5 Support restricting kinds on insertion (#2814)
• a10818a8778dcb58eb582d00ffda4b2c86bf190b fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#2812)
• 8a2f3a2dd023b81ad8b63e2f365676ec438dc9fa add checks to ensure returned entries match client inputs to rekor-cli (#2799)
• 0e88bac01d1173b8b2cbc8ed790106441573bbdb add nil pointer check to resolve fuzzing crash (#2807)
• 93da954478a2ffb1821d4904a80d9a5cbe268324 client: surface last-response details after retries are exhausted (#2796)
• 4d67ecd8ec810bc6af9761ad10ebd2ac899cfdbd Fix internal error detail leakage in 500 responses (#2801)
• b34ca94fc01405cb50acb956cc181d57382a6b2d add defensive check to ensure tid is in config ahead of getting client (#2795)
• 656c832ab90feef91f5dcc751ae1cb851c73f4bd restapi: include inactiveShards in the homepage total count (#2797)

Thanks for all contributors!

Commits

• 3b75cd9 build(deps): Bump the all group across 1 directory with 7 updates (#2829)
• 759b98e alpine: Enforce max size limit on decompression (#2831)
• c7e77ee Support restricting kinds on insertion (#2814)
• a10818a fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#...
• c31f3fc build(deps): Bump cloud.google.com/go/profiler from 0.4.3 to 0.6.0
• f2a9fb0 build(deps): Bump go.uber.org/zap from 1.27.1 to 1.28.0
• e3ba248 build(deps): Bump golang in the all group across 1 directory
• 62e5ddd build(deps): Bump github.com/go-openapi/swag from 0.25.5 to 0.26.0
• f4f91d5 build(deps): Bump github.com/tink-crypto/tink-go-awskms/v2 to v3 (#2827)
• 9bc540f build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2820)
• Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.10.6 to 1.10.8

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.10.8

What's Changed

• Support standard PKCS#8 encrypted private key decryption in sigstore/sigstore#2333

Full Changelog: sigstore/sigstore@v1.10.7...v1.10.8

v1.10.7

What's Changed

• add functional options to DSSE to improve memory usage, validation in sigstore/sigstore#2326
• Extend PEM private key unmarshalling to support legacy format in sigstore/sigstore#2332

Full Changelog: sigstore/sigstore@v1.10.6...v1.10.7

Commits

• c761681 Support standard PKCS#8 encrypted private key decryption (#2333)
• 005faf9 Extend PEM private key unmarshalling to support legacy format (#2332)
• e70e4ed add functional options to DSSE to improve memory usage, validation (#2326)
• 899684d build(deps): Bump github.com/letsencrypt/boulder (#2307)
• 181dc40 build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2308)
• 2c141a7 build(deps): Bump golangci/golangci-lint-action in the all group (#2328)
• b6c0214 build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#2329)
• 2ff50c9 build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (#2330)
• d0204c3 build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (#2331)
• afdf897 build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (#2312)
• Additional commits viewable in compare view

Updates go.podman.io/image/v5 from 5.39.2 to 5.40....

Description has been truncated