build(deps): bump chainguard.dev/sdk from 0.1.48 to 0.1.49 (#2040)

Bumps [chainguard.dev/sdk](https://github.com/chainguard-dev/sdk) from
0.1.48 to 0.1.49.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/chainguard-dev/sdk/releases">chainguard.dev/sdk's
releases</a>.</em></p>
<blockquote>
<h2>v0.1.49</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/chainguard-dev/sdk/compare/v0.1.48...v0.1.49">https://github.com/chainguard-dev/sdk/compare/v0.1.48...v0.1.49</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/chainguard-dev/sdk/commit/67cab92ec71521823d35e50bb02e248b982a32cf"><code>67cab92</code></a>
Merge pull request <a
href="https://redirect.github.com/chainguard-dev/sdk/issues/132">#132</a>
from chainguard-dev/create-pull-request/patch</li>
<li><a
href="https://github.com/chainguard-dev/sdk/commit/6c51a422c803c65a16a03b11ec60e17e68ae7968"><code>6c51a42</code></a>
Export 8dc110b4fcbc4b64cec2cc5fd54aa026e5cda736</li>
<li><a
href="https://github.com/chainguard-dev/sdk/commit/b656a4bc31dc653cb5f752b3bdd67d6ef561c628"><code>b656a4b</code></a>
Export 2ee32c91f799a2af3fe1daaf0f3226c8a0ffd311</li>
<li><a
href="https://github.com/chainguard-dev/sdk/commit/1edac62be5e6fb031c2d8a2c5805f577f3531a5a"><code>1edac62</code></a>
Export f7154831c5b0cd1f525bc9f63acfb52e3be9ee13</li>
<li>See full diff in <a
href="https://github.com/chainguard-dev/sdk/compare/v0.1.48...v0.1.49">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=chainguard.dev/sdk&package-manager=go_modules&previous-version=0.1.48&new-version=0.1.49)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -3,7 +3,7 @@ module chainguard.dev/apko
 go 1.25.0
 
 require (
-	chainguard.dev/sdk v0.1.48
+	chainguard.dev/sdk v0.1.49
 	github.com/chainguard-dev/clog v1.8.0
 	github.com/charmbracelet/log v0.4.2
 	github.com/go-git/go-git/v5 v5.16.4

go.sum

@@ -1,7 +1,7 @@
 chainguard.dev/go-grpc-kit v0.17.15 h1:y+FBjta2lsC0XxlkG+W5P1VxYl0zG74GRvoYN2o+p7s=
 chainguard.dev/go-grpc-kit v0.17.15/go.mod h1:1wAVAX2CCamtFlfMs9PFzfgQQxX1/TQyF6cbWApbJ2U=
-chainguard.dev/sdk v0.1.48 h1:WwObi7i4AkKRnbBzQ3Rq9Gikc3DDWkF6peLvx4JZdnE=
-chainguard.dev/sdk v0.1.48/go.mod h1:b4isqRFaCBaRuVcHUrFeaqvt3d8J9GNOMS0RAyoawXw=
+chainguard.dev/sdk v0.1.49 h1:U9290jR9GHSaFsxSTb5st3t/JqoTwhODFEA6BnybXBc=
+chainguard.dev/sdk v0.1.49/go.mod h1:b4isqRFaCBaRuVcHUrFeaqvt3d8J9GNOMS0RAyoawXw=
 cloud.google.com/go/auth v0.18.1 h1:IwTEx92GFUo2pJ6Qea0EU3zYvKnTAeRCODxfA/G5UWs=
 cloud.google.com/go/auth v0.18.1/go.mod h1:GfTYoS9G3CWpRA3Va9doKN9mjPGRS+v41jmZAhBzbrA=
 cloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc=