chore(deps): Bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 in /examples (#251)

Bumps [oras.land/oras-go/v2](https://github.com/oras-project/oras-go)
from 2.5.0 to 2.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/oras-project/oras-go/releases">oras.land/oras-go/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.6.0</h2>
<h2>New Features</h2>
<ul>
<li>Upgrade to <a
href="https://github.com/opencontainers/image-spec/releases/tag/v1.1.1"><code>image-spec
v1.1.1</code></a> and <a
href="https://github.com/opencontainers/distribution-spec/releases/tag/v1.1.1"><code>distribution-spec
v1.1.1</code></a></li>
<li>Support context cancellation in <a
href="https://pkg.go.dev/oras.land/oras-go/[email protected]/content/file#Store.Add"><code>file.Store.Add()</code></a></li>
<li>Introduce <a
href="https://pkg.go.dev/oras.land/oras-go/[email protected]/registry/remote/credentials#NewMemoryStoreFromDockerConfig"><code>credentials.NewMemoryStoreFromDockerConfig</code></a>
to load Docker config bytes into an in-memory credentials store</li>
<li>Add <code>PreservePermissions</code> option to <a
href="https://pkg.go.dev/oras.land/oras-go/[email protected]/content/file#Store">file
store</a> to retain original permissions when extracting tar
archives</li>
<li>Introduce <a
href="https://pkg.go.dev/oras.land/oras-go/[email protected]#CopyError"><code>oras.CopyError</code></a>
to identify error sources in copy operations</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/640">#640</a>:
Unclear error message from <code>oci.NewFromTar</code></li>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/865">#865</a>:
Symbolic links are not automatically overwritten when extracted from tar
archive to File store</li>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/851">#851</a>:
Dot‑prefixed paths in tar archives were not recognized by
<code>ReadOnlyOCIStore</code></li>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/880">#880</a>:
The <code>index.json</code> generated by the OCI store lacked a
<code>mediaType</code> field</li>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/895">#895</a>:
The <code>Docker-Content-Digest</code> header was not verified in
<code>Repository.Blobs().Fetch()</code></li>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/916">#916</a>:
Incorrect use of <code>atomic.Value</code> in the
<code>syncutil.Go</code> utility function causes panics</li>
<li>Fix <a
href="https://redirect.github.com/oras-project/oras-go/issues/923">#923</a>:
Pushing descriptors with invalid digests to memory or file store caused
panics</li>
<li>Other minor bug fixes</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add documentation for artifact modeling</li>
<li>Add documentation for targets and content store</li>
<li>Add quickstart tutorial</li>
<li>Improve examples</li>
<li>Other minor improvements</li>
</ul>
<h2>Other Changes</h2>
<ul>
<li>Upgrade the Go support window to <code>[1.23, 1.24]</code></li>
<li>Increase test coverage to 80%</li>
<li>Update dependencies</li>
<li>Minor optimization</li>
</ul>
<h2>Detailed Commits</h2>
<ul>
<li>fix: cancel goroutine before the next one is created by <a
href="https://github.com/wangxiaoxuan273"><code>@​wangxiaoxuan273</code></a>
in <a
href="https://redirect.github.com/oras-project/oras-go/pull/739">oras-project/oras-go#739</a></li>
<li>build(deps): bump apache/skywalking-eyes from 0.5.0 to 0.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/740">oras-project/oras-go#740</a></li>
<li>bump(ci): update codecov to v4 by <a
href="https://github.com/wangxiaoxuan273"><code>@​wangxiaoxuan273</code></a>
in <a
href="https://redirect.github.com/oras-project/oras-go/pull/741">oras-project/oras-go#741</a></li>
<li>docs: update migration guide and copy doc by <a
href="https://github.com/Wwwsylvia"><code>@​Wwwsylvia</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/752">oras-project/oras-go#752</a></li>
<li>test: fix file closing issue on windows by <a
href="https://github.com/shizhMSFT"><code>@​shizhMSFT</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/764">oras-project/oras-go#764</a></li>
<li>docs: document PackManifestOptions to make PackManifest reproducible
by <a
href="https://github.com/wangxiaoxuan273"><code>@​wangxiaoxuan273</code></a>
in <a
href="https://redirect.github.com/oras-project/oras-go/pull/749">oras-project/oras-go#749</a></li>
<li>build: enforce diff code coverage of 80% by <a
href="https://github.com/Wwwsylvia"><code>@​Wwwsylvia</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/769">oras-project/oras-go#769</a></li>
<li>fix: add missing operation to fs path error by <a
href="https://github.com/qweeah"><code>@​qweeah</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/799">oras-project/oras-go#799</a></li>
<li>build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/801">oras-project/oras-go#801</a></li>
<li>feat: support context cancellation in file store by <a
href="https://github.com/lucasrod16"><code>@​lucasrod16</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/803">oras-project/oras-go#803</a></li>
<li>build(go): shift Go support window to [1.22, 1.23] by <a
href="https://github.com/Wwwsylvia"><code>@​Wwwsylvia</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/820">oras-project/oras-go#820</a></li>
<li>refactor: fix seed for retry policy by <a
href="https://github.com/Wwwsylvia"><code>@​Wwwsylvia</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/821">oras-project/oras-go#821</a></li>
<li>fix: check close error in <code>oci/storage.go</code> during
ingestion by <a
href="https://github.com/Wwwsylvia"><code>@​Wwwsylvia</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/830">oras-project/oras-go#830</a></li>
<li>chore(workflow): add stale bot by <a
href="https://github.com/Wwwsylvia"><code>@​Wwwsylvia</code></a> in <a
href="https://redirect.github.com/oras-project/oras-go/pull/837">oras-project/oras-go#837</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oras-project/oras-go/commit/05a2b09cbf2eab1df691411884dc4df741ec56ab"><code>05a2b09</code></a>
build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 (<a
href="https://redirect.github.com/oras-project/oras-go/issues/955">#955</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/753f8a8d98a5ed950366b5580c7edbd204fa5630"><code>753f8a8</code></a>
docs: improve README.md (<a
href="https://redirect.github.com/oras-project/oras-go/issues/950">#950</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/5043a7b222309b9c3a3f2435d349ef638ddbd7bb"><code>5043a7b</code></a>
docs: updated broken links (<a
href="https://redirect.github.com/oras-project/oras-go/issues/951">#951</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/17e7d1550e2c84f43bb879ca5770c6cb6111d04a"><code>17e7d15</code></a>
docs: add quick start for oras-go (<a
href="https://redirect.github.com/oras-project/oras-go/issues/939">#939</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/34a87efb2c69c10d4033754a9454b162b9724af8"><code>34a87ef</code></a>
test: add unit tests for validateMediaType (<a
href="https://redirect.github.com/oras-project/oras-go/issues/946">#946</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/f7a6126986d97f498be7b516ebf5478a49a6df86"><code>f7a6126</code></a>
docs: add more practical examples (<a
href="https://redirect.github.com/oras-project/oras-go/issues/940">#940</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/0c120353c5bde1390a033b230eeaa5bdc20f8dce"><code>0c12035</code></a>
docs: improve docs for OCI store (<a
href="https://redirect.github.com/oras-project/oras-go/issues/941">#941</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/79636266444df591ad8f05bad6bb474ae3085224"><code>7963626</code></a>
feat: introduce <code>CopyError</code> to identify error source in copy
operations (<a
href="https://redirect.github.com/oras-project/oras-go/issues/933">#933</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/6dd69136328d82ca5c93e71d340449391fd32ad7"><code>6dd6913</code></a>
build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 (<a
href="https://redirect.github.com/oras-project/oras-go/issues/937">#937</a>)</li>
<li><a
href="https://github.com/oras-project/oras-go/commit/d0ac8e4555841e16e2ace95b1bce11f4717a7f41"><code>d0ac8e4</code></a>
docs: update example tests (<a
href="https://redirect.github.com/oras-project/oras-go/issues/932">#932</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/oras-project/oras-go/compare/v2.5.0...v2.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oras.land/oras-go/v2&package-manager=go_modules&previous-version=2.5.0&new-version=2.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

examples/go.mod

@@ -41,8 +41,8 @@ require (
 	github.com/opencontainers/image-spec v1.1.1 // indirect
 	golang.org/x/crypto v0.38.0 // indirect
 	golang.org/x/mod v0.24.0 // indirect
-	golang.org/x/sync v0.10.0 // indirect
-	oras.land/oras-go/v2 v2.5.0
+	golang.org/x/sync v0.14.0 // indirect
+	oras.land/oras-go/v2 v2.6.0
 )
 
 replace github.com/aws/aws-signer-notation-plugin => ../

examples/go.sum

@@ -129,8 +129,9 @@ golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
 golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.14.0 h1:woo0S4Yywslg6hp4eUFjTVOyKt0RookbpAHG4c1HmhQ=
+golang.org/x/sync v0.14.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -172,5 +173,5 @@ gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-oras.land/oras-go/v2 v2.5.0 h1:o8Me9kLY74Vp5uw07QXPiitjsw7qNXi8Twd+19Zf02c=
-oras.land/oras-go/v2 v2.5.0/go.mod h1:z4eisnLP530vwIOUOJeBIj0aGI0L1C3d53atvCBqZHg=
+oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc=
+oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o=