build(deps): bump the go group with 6 updates (#110)

Bumps the go group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/containers/image/v5](https://github.com/containers/image)
| `5.33.1` | `5.34.0` |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) |
`0.15.0` | `0.16.0` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) |
`1.9.0` | `1.10.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) |
`0.52.0` | `0.53.0` |
| [github.com/fluxcd/pkg/tar](https://github.com/fluxcd/pkg) | `0.10.0`
| `0.11.0` |
| [ocm.software/ocm](https://github.com/open-component-model/ocm) |
`0.19.0` | `0.19.1` |

Updates `github.com/containers/image/v5` from 5.33.1 to 5.34.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/containers/image/releases">github.com/containers/image/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.34.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump c/storage to v1.56.0, c/image to v5.33.0 by <a
href="https://github.com/TomSweeneyRedHat"><code>@​TomSweeneyRedHat</code></a>
in <a
href="https://redirect.github.com/containers/image/pull/2625">containers/image#2625</a></li>
<li>Update stubs to match signature of actual methods by <a
href="https://github.com/SpangleLabs"><code>@​SpangleLabs</code></a> in
<a
href="https://redirect.github.com/containers/image/pull/2541">containers/image#2541</a></li>
<li>docker: add check for too many parts by <a
href="https://github.com/giuseppe"><code>@​giuseppe</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2619">containers/image#2619</a></li>
<li>fix(deps): update module golang.org/x/crypto to v0.29.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2624">containers/image#2624</a></li>
<li>fix(deps): update module golang.org/x/oauth2 to v0.24.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2626">containers/image#2626</a></li>
<li>chore(deps): update dependency golangci/golangci-lint to v1.62.0 by
<a href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2630">containers/image#2630</a></li>
<li>chore(deps): update dependency containers/automation_images to
v20241107 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2631">containers/image#2631</a></li>
<li>fix(deps): update module github.com/sigstore/sigstore to v1.8.10 by
<a href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2601">containers/image#2601</a></li>
<li>fix(deps): update module github.com/sylabs/sif/v2 to v2.20.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2611">containers/image#2611</a></li>
<li>docker: drop use of external distribution challenge pkg by <a
href="https://github.com/flavianmissi"><code>@​flavianmissi</code></a>
in <a
href="https://redirect.github.com/containers/image/pull/2629">containers/image#2629</a></li>
<li>Merge tag 'v5.33.0' into main by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2634">containers/image#2634</a></li>
<li>Improve an error message by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2595">containers/image#2595</a></li>
<li>Propagate <code>CompressedDigest</code>/<code>CompressedSize</code>
when reusing data from another layer by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2583">containers/image#2583</a></li>
<li>chore(deps): update dependency golangci/golangci-lint to v1.62.2 by
<a href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2640">containers/image#2640</a></li>
<li>fix(deps): update module github.com/proglottis/gpgme to v0.1.4 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2638">containers/image#2638</a></li>
<li>fix(deps): update module github.com/stretchr/testify to v1.10.0 by
<a href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2639">containers/image#2639</a></li>
<li>Two small lint updates by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2642">containers/image#2642</a></li>
<li>Use testify's ErrorAs to simplify tests a bit by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2641">containers/image#2641</a></li>
<li>Fix excessive memory and disk usage when sharing layers by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2636">containers/image#2636</a></li>
<li>Fix a missing s.lock.Unlock() on an error path by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2643">containers/image#2643</a></li>
<li>In pulls, compute DiffIDs earlier, and also for v2s2 by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2635">containers/image#2635</a></li>
<li>Update module golang.org/x/sync to v0.10.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2650">containers/image#2650</a></li>
<li>Update golang.org/x/exp digest to 2d47ceb by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2648">containers/image#2648</a></li>
<li>Update module golang.org/x/term to v0.27.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2651">containers/image#2651</a></li>
<li>Update module golang.org/x/crypto to v0.30.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2652">containers/image#2652</a></li>
<li>Update module github.com/docker/docker to v27.4.0+incompatible by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2654">containers/image#2654</a></li>
<li>Update module github.com/docker/cli to v27.4.0+incompatible by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2653">containers/image#2653</a></li>
<li>Update module golang.org/x/crypto to v0.31.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2655">containers/image#2655</a></li>
<li>Update module github.com/sylabs/sif/v2 to v2.20.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2656">containers/image#2656</a></li>
<li>Update module github.com/sigstore/sigstore to v1.8.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2657">containers/image#2657</a></li>
<li>Update module github.com/secure-systems-lab/go-securesystemslib to
v0.9.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2658">containers/image#2658</a></li>
<li>Update module github.com/containers/ocicrypt to v1.2.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2659">containers/image#2659</a></li>
<li>Update module github.com/docker/docker to v27.4.1+incompatible by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2662">containers/image#2662</a></li>
<li>Update module github.com/sylabs/sif/v2 to v2.20.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2660">containers/image#2660</a></li>
<li>Update module github.com/docker/cli to v27.4.1+incompatible by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2661">containers/image#2661</a></li>
<li>Fix docker daemon on Windows trying to use https instead of http for
named pipes by <a
href="https://github.com/brbayes-msft"><code>@​brbayes-msft</code></a>
in <a
href="https://redirect.github.com/containers/image/pull/2666">containers/image#2666</a></li>
<li>Update dependency golangci/golangci-lint to v1.63.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2667">containers/image#2667</a></li>
<li>Update dependency golangci/golangci-lint to v1.63.3 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2668">containers/image#2668</a></li>
<li>Update dependency golangci/golangci-lint to v1.63.4 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2669">containers/image#2669</a></li>
<li>OCI layout extensions by <a
href="https://github.com/vrothberg"><code>@​vrothberg</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2633">containers/image#2633</a></li>
<li>Update module golang.org/x/term to v0.28.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2671">containers/image#2671</a></li>
<li>Update module golang.org/x/oauth2 to v0.25.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2670">containers/image#2670</a></li>
<li>Update module golang.org/x/crypto to v0.32.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2674">containers/image#2674</a></li>
<li>Update module github.com/vbauerster/mpb/v8 to v8.9.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2675">containers/image#2675</a></li>
<li>Add a comment justifying lack of unit test coverage by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2673">containers/image#2673</a></li>
<li>Move JSONFormatToInvalidSignatureError to an
unconditionally-included file by <a
href="https://github.com/mtrmac"><code>@​mtrmac</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2632">containers/image#2632</a></li>
<li>Update dependency containers/automation_images to v20250107 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2677">containers/image#2677</a></li>
<li>Update module github.com/sigstore/sigstore to v1.8.12 by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/containers/image/pull/2678">containers/image#2678</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/containers/image/commit/51a5d96532f54214b7bf95eba92e22be2c75ec9b"><code>51a5d96</code></a>
Bump to c/image v5.34.0</li>
<li><a
href="https://github.com/containers/image/commit/771660e09991afcc09f6e78c68d931f77d6e6179"><code>771660e</code></a>
Bump c/storage to v1.57.1</li>
<li><a
href="https://github.com/containers/image/commit/7f0e59d15a6d632cbb2592cd97a86ed8c4303721"><code>7f0e59d</code></a>
Merge pull request <a
href="https://redirect.github.com/containers/image/issues/2696">#2696</a>
from Luap99/ENOENT</li>
<li><a
href="https://github.com/containers/image/commit/3f17e2e843bc967f7ca91716cedd0d60ac0339a9"><code>3f17e2e</code></a>
ignore ENOENT errors when parsing .crt files</li>
<li><a
href="https://github.com/containers/image/commit/c9771a80f77c2ad641796e827324171490f9a8da"><code>c9771a8</code></a>
ignore ENOENT errors when parsing registries.conf.d files</li>
<li><a
href="https://github.com/containers/image/commit/1294122947b642ed3333dece9c7bef50d279fdee"><code>1294122</code></a>
ignore ENOENT errors when parsing registries.d files</li>
<li><a
href="https://github.com/containers/image/commit/b5c6aff95ca7cac4be09d8456050a9bfc46e9cbf"><code>b5c6aff</code></a>
Merge pull request <a
href="https://redirect.github.com/containers/image/issues/2693">#2693</a>
from containers/renovate/github.com-docker-docker-27.x</li>
<li><a
href="https://github.com/containers/image/commit/1683fc262baa0258ac2faf55499df108896ef854"><code>1683fc2</code></a>
Update module github.com/docker/docker to v27.5.1+incompatible</li>
<li><a
href="https://github.com/containers/image/commit/16f7e1e0e1fdf19407bfc6e669d1573d037c88f4"><code>16f7e1e</code></a>
Merge pull request <a
href="https://redirect.github.com/containers/image/issues/2692">#2692</a>
from containers/renovate/github.com-docker-cli-27.x</li>
<li><a
href="https://github.com/containers/image/commit/30f0d87dbe6bec947209c4a23ec2d88a1ada58a8"><code>30f0d87</code></a>
Update module github.com/docker/cli to v27.5.1+incompatible</li>
<li>Additional commits viewable in <a
href="https://github.com/containers/image/compare/v5.33.1...v5.34.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/apis/event` from 0.15.0 to 0.16.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/91eda6e6536c797657fa42f15a35a97cf742c491"><code>91eda6e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/694">#694</a> from
fluxcd/git-deps-up</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2a6458411ae98bc7efc45eaf2e1a8354e6ab0272"><code>2a64584</code></a>
Use gomega in sourceignore</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/46577cdee2228a7cf3d5899e3c260c9b65d07c0e"><code>46577cd</code></a>
Update <code>golang.org</code> dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/e6b6af79c65a26d82479c71282d4d3f340778be4"><code>e6b6af7</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/685">#685</a> from
knutgoetz/chore/gogit/delete-gogiterror-function</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/cbc217282a3ba2f2da712e28233de8db2d3c8fcf"><code>cbc2172</code></a>
Delete obsolete goGitError function</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/02723c3a72f8319604ee24af262fec3eac72bc4e"><code>02723c3</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/693">#693</a> from
fluxcd/go-git-v5.10.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3715de1f7c8ccaef9433478f38c73f238ae7d048"><code>3715de1</code></a>
Update go-git to v5.10.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/ce912554b6d1e5b25992e6416daebe24eff50c9e"><code>ce91255</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/692">#692</a> from
fluxcd/ssa-nits</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/8fc450539b794d445f739771fce61a6310fb58cd"><code>8fc4505</code></a>
ssa: prevent unnecessary <code>DeepCopy</code></li>
<li><a
href="https://github.com/fluxcd/pkg/commit/cc076057cc833539561eab9ff04e4378c4b33b5e"><code>cc07605</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/691">#691</a> from
fluxcd/jsondiff-include-obj</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/git/v0.15.0...git/v0.16.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/apis/meta` from 1.9.0 to 1.10.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/2f763a4fe9550e040e6fdf97636d1c72658cde16"><code>2f763a4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/857">#857</a> from
fluxcd/custom-healthchecks</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a6353b2bd9242e03622bf2470d845487ca24aa8f"><code>a6353b2</code></a>
Add healthcheck expressions to kustomize types</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/af0f283e5176fa4157c155efab9c58014768d0d6"><code>af0f283</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/859">#859</a> from
fluxcd/cel-meta</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/117893065c616341ba41c013f352c22859ed191e"><code>1178930</code></a>
Add InvalidCELExpressionReason to apis/meta</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f39dac44d13c708e998d509047b82675cea52c00"><code>f39dac4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/861">#861</a> from
fluxcd/deps-kube-v0.32.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/70e88cb7cd66552db3c1209b4d6b2c68fdaf1012"><code>70e88cb</code></a>
Update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f59d360b7f39c81d0aff0a8fbc4f9c316a4e2882"><code>f59d360</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/850">#850</a> from
kane8n/support-sparse-checkout</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a033d2fb81e175edc0dae65d7b9260929e245552"><code>a033d2f</code></a>
support sparse checkout</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/528bc561beb5266fb551d39b36f612471802d017"><code>528bc56</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/856">#856</a> from
fluxcd/get-revision</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a18915210a965691807f1fcd1536ae545c5a2bb9"><code>a189152</code></a>
Add GetRevision() to Event API</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/apis/meta/v1.9.0...apis/meta/v1.10.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/runtime` from 0.52.0 to 0.53.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/c964ce7b91949ff4b5e3959db4f1d7bb2e029a49"><code>c964ce7</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/858">#858</a> from
fluxcd/custom-healthchecks-impl</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/62d235c4b26b9e6cf9083e878528f786e850f220"><code>62d235c</code></a>
Add CEL library with custom healthchecks to runtime</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/243510fd126615b2f687fccfb6e95589f0003cf5"><code>243510f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/863">#863</a> from
fluxcd/dependabot/github_actions/ci-83dfb6cda2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3cffbebd8135ed1758694829d49484f7f57fb909"><code>3cffbeb</code></a>
build(deps): bump the ci group across 1 directory with 3 updates</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2f763a4fe9550e040e6fdf97636d1c72658cde16"><code>2f763a4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/857">#857</a> from
fluxcd/custom-healthchecks</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a6353b2bd9242e03622bf2470d845487ca24aa8f"><code>a6353b2</code></a>
Add healthcheck expressions to kustomize types</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/af0f283e5176fa4157c155efab9c58014768d0d6"><code>af0f283</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/859">#859</a> from
fluxcd/cel-meta</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/117893065c616341ba41c013f352c22859ed191e"><code>1178930</code></a>
Add InvalidCELExpressionReason to apis/meta</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f39dac44d13c708e998d509047b82675cea52c00"><code>f39dac4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/861">#861</a> from
fluxcd/deps-kube-v0.32.1</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/70e88cb7cd66552db3c1209b4d6b2c68fdaf1012"><code>70e88cb</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.52.0...runtime/v0.53.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/tar` from 0.10.0 to 0.11.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/a5896a646e3c730e3d67b9d71cc72a8353293eee"><code>a5896a6</code></a>
git/internal/e2e: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/00f64653d7856ab9ba3ec8d3a278ff63cd798fac"><code>00f6465</code></a>
git/gogit: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/acf35bd746e7aa05e81deac537f966cd0a060b08"><code>acf35bd</code></a>
git: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/eda77cf48a85cabec5d16307ff0699d80fb4a9a7"><code>eda77cf</code></a>
ssh: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/41b3167e5546e5176086cf6230724509776e92e0"><code>41b3167</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/504">#504</a> from
fluxcd/misc-update-deps</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9a579c957f7f345e891159638d3c62f791642299"><code>9a579c9</code></a>
ssa: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/5185f6416fc9db33819ee722edffa0aef7765f69"><code>5185f64</code></a>
http/fetch: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3caadb06a1b46bab774baf2da243083bf4834810"><code>3caadb0</code></a>
oci/tests: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6f300e898a3675aa105b5b6cd1f01597a0541255"><code>6f300e8</code></a>
oci: update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/527a9936d1054b697453ead05485c0277699d530"><code>527a993</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/503">#503</a> from
fluxcd/kustomize-update-deps</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/git/v0.10.0...git/v0.11.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `ocm.software/ocm` from 0.19.0 to 0.19.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm/releases">ocm.software/ocm's
releases</a>.</em></p>
<blockquote>
<h2>v0.19.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat(normalisation): jsonNormalisation/v3 and fixes to
jsonNormalisation/v1 as well as jsonNormalisation/v2 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1218">#1218</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1230">open-component-model/ocm#1230</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(transfer): accidental extra identity defaulting during transfer
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1236">#1236</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1237">open-component-model/ocm#1237</a></li>
<li>fix: unable to close, unable to unref last: unable to cleanup
compone… by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1253">open-component-model/ocm#1253</a></li>
<li>fix(workaround): allow old norm algos to be hashed with old digest
ctxts by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1264">open-component-model/ocm#1264</a></li>
</ul>
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.19.1-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1197">open-component-model/ocm#1197</a></li>
<li>chore(ci): ensure body is encoded correctly and can never be
recognized as secret for release (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1238">#1238</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1239">open-component-model/ocm#1239</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/open-component-model/ocm/compare/v0.19.0...v0.19.1">https://github.com/open-component-model/ocm/compare/v0.19.0...v0.19.1</a></p>
<h2>v0.19.1-rc.3</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat(normalisation): jsonNormalisation/v3 and fixes to
jsonNormalisation/v1 as well as jsonNormalisation/v2 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1218">#1218</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1230">open-component-model/ocm#1230</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(transfer): accidental extra identity defaulting during transfer
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1236">#1236</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1237">open-component-model/ocm#1237</a></li>
<li>fix: unable to close, unable to unref last: unable to cleanup
compone… by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1253">open-component-model/ocm#1253</a></li>
<li>fix(workaround): allow old norm algos to be hashed with old digest
ctxts by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1264">open-component-model/ocm#1264</a></li>
</ul>
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.19.1-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1197">open-component-model/ocm#1197</a></li>
<li>chore(ci): ensure body is encoded correctly and can never be
recognized as secret for release (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1238">#1238</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1239">open-component-model/ocm#1239</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/open-component-model/ocm/compare/v0.19.0...v0.19.1">https://github.com/open-component-model/ocm/compare/v0.19.0...v0.19.1</a></p>
<h2>v0.19.1-rc.2</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat(normalisation): jsonNormalisation/v3 and fixes to
jsonNormalisation/v1 as well as jsonNormalisation/v2 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1218">#1218</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1230">open-component-model/ocm#1230</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix(transfer): accidental extra identity defaulting during transfer
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1236">#1236</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1237">open-component-model/ocm#1237</a></li>
<li>fix: unable to close, unable to unref last: unable to cleanup
compone… by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1253">open-component-model/ocm#1253</a></li>
</ul>
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.19.1-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1197">open-component-model/ocm#1197</a></li>
<li>chore(ci): ensure body is encoded correctly and can never be
recognized as secret for release (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1238">#1238</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1239">open-component-model/ocm#1239</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm/commit/2468beedf0dd7d3e2a13e5e8562d3c8e06bf004a"><code>2468bee</code></a>
Release v0.19.1</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/328d326b462d32406a5f7136f7fa165a56b784fe"><code>328d326</code></a>
fix(workaround): allow old norm algos to be hashed with old digest ctxts
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1264">#1264</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/81f4d1f8da4894c88721ad935640b23d51b9c932"><code>81f4d1f</code></a>
fix: unable to close, unable to unref last: unable to cleanup compone…
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1253">#1253</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/d13eac6814f8392c99970f7ec2d6e2d9ee4a1148"><code>d13eac6</code></a>
chore(ci): patch release note write</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/8170fe0354ee0149a0b3e076b771c5f566a03021"><code>8170fe0</code></a>
chore(ci): ensure body is encoded correctly and can never be recognized
as se...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/eca9ef3dc71d3e1a4ace9a29a28801ac1ed01511"><code>eca9ef3</code></a>
fix(transfer): accidental extra identity defaulting during transfer (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1236">#1236</a>)
(...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/15a1b504789e296e88e731afc1b1223a0914ec5b"><code>15a1b50</code></a>
feat(normalisation): jsonNormalisation/v3 and fixes to
jsonNormalisation/v1 a...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/ede7619f291e40128b30338167d157642072c4d5"><code>ede7619</code></a>
chore: bump VERSION to 0.19.1-dev (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1197">#1197</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/0db18509d60184d5877be1cce088fb6bd640bf3f"><code>0db1850</code></a>
Release v0.19.0</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/7ef2f034ea5500429fd1168d9b6a0cdb3df0d4d5"><code>7ef2f03</code></a>
chore(backport): adjust labels to new configuration (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1154">#1154</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm/compare/v0.19...v0.19.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -9,11 +9,11 @@ replace github.com/opencontainers/go-digest => github.com/opencontainers/go-dige
 require (
 	github.com/Masterminds/semver/v3 v3.3.1
 	github.com/Masterminds/sprig/v3 v3.3.0
-	github.com/containers/image/v5 v5.33.1
-	github.com/fluxcd/pkg/apis/event v0.15.0
-	github.com/fluxcd/pkg/apis/meta v1.9.0
-	github.com/fluxcd/pkg/runtime v0.52.0
-	github.com/fluxcd/pkg/tar v0.10.0
+	github.com/containers/image/v5 v5.34.0
+	github.com/fluxcd/pkg/apis/event v0.16.0
+	github.com/fluxcd/pkg/apis/meta v1.10.0
+	github.com/fluxcd/pkg/runtime v0.53.0
+	github.com/fluxcd/pkg/tar v0.11.0
 	github.com/google/go-containerregistry v0.20.3
 	github.com/mandelsoft/filepath v0.0.0-20240223090642-3e2777258aa3
 	github.com/mandelsoft/goutils v0.0.0-20241005173814-114fa825bbdc
@@ -29,14 +29,14 @@ require (
 	k8s.io/apiextensions-apiserver v0.32.1
 	k8s.io/apimachinery v0.32.1
 	k8s.io/client-go v0.32.1
-	ocm.software/ocm v0.19.0
+	ocm.software/ocm v0.19.1
 	sigs.k8s.io/controller-runtime v0.20.1
 	sigs.k8s.io/yaml v1.4.0
 )
 
 require (
-	cloud.google.com/go/auth v0.10.2 // indirect
-	cloud.google.com/go/auth/oauth2adapt v0.2.5 // indirect
+	cloud.google.com/go/auth v0.13.0 // indirect
+	cloud.google.com/go/auth/oauth2adapt v0.2.6 // indirect
 	cloud.google.com/go/compute/metadata v0.6.0 // indirect
 	dario.cat/mergo v1.0.1 // indirect
 	filippo.io/edwards25519 v1.1.0 // indirect
@@ -73,26 +73,26 @@ require (
 	github.com/alibabacloud-go/tea-xml v1.1.3 // indirect
 	github.com/aliyun/credentials-go v1.3.10 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
-	github.com/aws/aws-sdk-go-v2 v1.32.5 // indirect
+	github.com/aws/aws-sdk-go-v2 v1.32.7 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7 // indirect
-	github.com/aws/aws-sdk-go-v2/config v1.28.5 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.17.46 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.20 // indirect
+	github.com/aws/aws-sdk-go-v2/config v1.28.7 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.48 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.22 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.40 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.24 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.24 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.26 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.26 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.24 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecr v1.36.6 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.27.2 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.7 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.5 // indirect
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.68.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.24.6 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.33.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.24.8 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.7 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.33.3 // indirect
 	github.com/aws/smithy-go v1.22.1 // indirect
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20241009180534-e718692eec62 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -115,20 +115,20 @@ require (
 	github.com/containerd/platforms v0.2.1 // indirect
 	github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
 	github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
-	github.com/containers/ocicrypt v1.2.0 // indirect
-	github.com/containers/storage v1.56.1 // indirect
-	github.com/coreos/go-oidc/v3 v3.11.0 // indirect
+	github.com/containers/ocicrypt v1.2.1 // indirect
+	github.com/containers/storage v1.57.1 // indirect
+	github.com/coreos/go-oidc/v3 v3.12.0 // indirect
 	github.com/cyberphone/json-canonicalization v0.0.0-20231217050601-ba74d44ecf5f // indirect
-	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
+	github.com/cyphar/filepath-securejoin v0.4.1 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
 	github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 // indirect
 	github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v27.5.0+incompatible // indirect
+	github.com/docker/cli v27.5.1+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
-	github.com/docker/docker v27.5.0+incompatible // indirect
+	github.com/docker/docker v27.5.1+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.8.2 // indirect
 	github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
@@ -138,14 +138,14 @@ require (
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/elliotchance/orderedmap v1.6.0 // indirect
 	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
-	github.com/evanphx/json-patch/v5 v5.9.0 // indirect
+	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
-	github.com/fluxcd/pkg/apis/acl v0.5.0 // indirect
+	github.com/fluxcd/pkg/apis/acl v0.6.0 // indirect
 	github.com/fluxcd/pkg/lockedfile v0.3.0 // indirect
 	github.com/fluxcd/pkg/sourceignore v0.7.0 // indirect
 	github.com/fluxcd/source-controller/api v1.3.0 // indirect
-	github.com/fsnotify/fsnotify v1.7.0 // indirect
+	github.com/fsnotify/fsnotify v1.8.0 // indirect
 	github.com/fvbommel/sortorder v1.1.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
 	github.com/ghodss/yaml v1.0.0 // indirect
@@ -176,12 +176,11 @@ require (
 	github.com/goccy/go-yaml v1.13.0 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang-jwt/jwt/v4 v4.5.1 // indirect
-	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/golang/snappy v0.0.4 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/certificate-transparency-go v1.2.1 // indirect
-	github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect
+	github.com/google/gnostic-models v0.6.9 // indirect
 	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/go-github/v45 v45.2.0 // indirect
 	github.com/google/go-github/v55 v55.0.0 // indirect
@@ -192,7 +191,7 @@ require (
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
-	github.com/googleapis/gax-go/v2 v2.14.0 // indirect
+	github.com/googleapis/gax-go/v2 v2.14.1 // indirect
 	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/gowebpki/jcs v1.0.1 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
@@ -219,7 +218,7 @@ require (
 	github.com/letsencrypt/boulder v0.0.0-20241010192615-6692160cedfa // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/magiconair/properties v1.8.7 // indirect
-	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/mandelsoft/logging v0.0.0-20240618075559-fdca28a87b0a // indirect
 	github.com/mandelsoft/spiff v1.7.0-beta-6 // indirect
 	github.com/marstr/guid v1.1.0 // indirect
@@ -233,7 +232,7 @@ require (
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/moby/docker-image-spec v1.3.1 // indirect
 	github.com/moby/locker v1.0.1 // indirect
-	github.com/moby/sys/capability v0.3.0 // indirect
+	github.com/moby/sys/capability v0.4.0 // indirect
 	github.com/moby/sys/mountinfo v0.7.2 // indirect
 	github.com/moby/sys/sequential v0.6.0 // indirect
 	github.com/moby/sys/user v0.3.0 // indirect
@@ -258,30 +257,30 @@ require (
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.20.5 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.60.0 // indirect
+	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/redis/go-redis/v9 v9.7.0 // indirect
 	github.com/ryanuber/go-glob v1.0.0 // indirect
 	github.com/sagikazarmark/locafero v0.6.0 // indirect
 	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
 	github.com/sassoftware/relic v7.2.1+incompatible // indirect
-	github.com/secure-systems-lab/go-securesystemslib v0.8.0 // indirect
+	github.com/secure-systems-lab/go-securesystemslib v0.9.0 // indirect
 	github.com/segmentio/ksuid v1.0.4 // indirect
 	github.com/shibumi/go-pathspec v1.3.0 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/sigstore/cosign/v2 v2.4.1 // indirect
 	github.com/sigstore/fulcio v1.6.5 // indirect
-	github.com/sigstore/protobuf-specs v0.3.2 // indirect
-	github.com/sigstore/rekor v1.3.7 // indirect
-	github.com/sigstore/sigstore v1.8.10 // indirect
+	github.com/sigstore/protobuf-specs v0.3.3 // indirect
+	github.com/sigstore/rekor v1.3.8 // indirect
+	github.com/sigstore/sigstore v1.8.12 // indirect
 	github.com/sigstore/timestamp-authority v1.2.3 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	github.com/spf13/cobra v1.8.1 // indirect
-	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/spf13/pflag v1.0.6 // indirect
 	github.com/spf13/viper v1.19.0 // indirect
 	github.com/spiffe/go-spiffe/v2 v2.4.0 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
@@ -296,7 +295,7 @@ require (
 	github.com/transparency-dev/merkle v0.0.2 // indirect
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
 	github.com/valyala/fasttemplate v1.2.2 // indirect
-	github.com/vbatts/tar-split v0.11.6 // indirect
+	github.com/vbatts/tar-split v0.11.7 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xanzy/go-gitlab v0.112.0 // indirect
 	github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
@@ -308,7 +307,6 @@ require (
 	github.com/zeebo/blake3 v0.2.3 // indirect
 	github.com/zeebo/errs v1.4.0 // indirect
 	go.mongodb.org/mongo-driver v1.17.1 // indirect
-	go.opencensus.io v0.24.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.58.0 // indirect
 	go.opentelemetry.io/otel v1.33.0 // indirect
@@ -320,26 +318,26 @@ require (
 	go.opentelemetry.io/otel/sdk/metric v1.31.0 // indirect
 	go.opentelemetry.io/otel/trace v1.33.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.3.1 // indirect
-	go.step.sm/crypto v0.54.2 // indirect
+	go.step.sm/crypto v0.56.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
 	golang.org/x/crypto v0.32.0 // indirect
-	golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c // indirect
+	golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67 // indirect
 	golang.org/x/mod v0.22.0 // indirect
 	golang.org/x/net v0.34.0 // indirect
 	golang.org/x/oauth2 v0.25.0 // indirect
 	golang.org/x/sync v0.10.0 // indirect
 	golang.org/x/sys v0.29.0 // indirect
 	golang.org/x/term v0.28.0 // indirect
 	golang.org/x/text v0.21.0 // indirect
-	golang.org/x/time v0.8.0 // indirect
+	golang.org/x/time v0.9.0 // indirect
 	golang.org/x/tools v0.29.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
-	google.golang.org/api v0.206.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20241104194629-dd2ea8efbc28 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20241104194629-dd2ea8efbc28 // indirect
-	google.golang.org/grpc v1.68.0 // indirect
-	google.golang.org/protobuf v1.36.3 // indirect
+	google.golang.org/api v0.216.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250102185135-69823020774d // indirect
+	google.golang.org/grpc v1.69.4 // indirect
+	google.golang.org/protobuf v1.36.4 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
@@ -348,14 +346,14 @@ require (
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	helm.sh/helm/v3 v3.16.3 // indirect
-	k8s.io/cli-runtime v0.32.0 // indirect
+	k8s.io/cli-runtime v0.32.1 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
+	k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7 // indirect
 	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
 	oras.land/oras-go v1.2.6 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
-	sigs.k8s.io/kustomize/api v0.18.0 // indirect
-	sigs.k8s.io/kustomize/kyaml v0.18.1 // indirect
+	sigs.k8s.io/kustomize/api v0.19.0 // indirect
+	sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect
 	sigs.k8s.io/release-utils v0.8.5 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.4.2 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
 )