chore(deps): bump the go group across 1 directory with 8 updates (#162)

Bumps the go group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) |
`2.6.3` | `2.6.4` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) |
`1.13.0` | `1.15.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) |
`0.62.0` | `0.66.0` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.48.0`
| `0.51.0` |
| [github.com/fluxcd/pkg/version](https://github.com/fluxcd/pkg) |
`0.8.0` | `0.9.0` |
|
[github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller)
| `0.26.2` | `0.26.4` |


Updates `github.com/fluxcd/flux2/v2` from 2.6.3 to 2.6.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/flux2/releases">github.com/fluxcd/flux2/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.6.4</h2>
<h2>Highlights</h2>
<p>Flux v2.6.4 is a patch release that comes with various fixes. Users
are encouraged to upgrade for the best experience.</p>
<p>Fixes:</p>
<ul>
<li>Fix for SOPS decryption with US Government KMS keys failing with the
error:</li>
</ul>
<pre><code>STS: AssumeRoleWithWebIdentity, https response error\n
StatusCode: 0, RequestID: ,
request send failed, Post\n
\&quot;https://sts.arn.amazonaws.com/\&quot;: dial tcp:
lookupts.arn.amazonaws.com on 10.100.0.10:53: no such host
</code></pre>
<h2>Components changelog</h2>
<ul>
<li>kustomize-controller <a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.6.1/CHANGELOG.md">v1.6.1</a></li>
</ul>
<h2>CLI changed</h2>
<ul>
<li>[release/v2.6.x] Update toolkit components by <a
href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in <a
href="https://redirect.github.com/fluxcd/flux2/pull/5444">fluxcd/flux2#5444</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4">https://github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/flux2/commit/6bf37f6a560fd84982d67f853162e4b3c2235edb"><code>6bf37f6</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5444">#5444</a>
from fluxcd/backport-5443-to-release/v2.6.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/8b219112c6f2e7042aeb1f381753d9831ddb23ad"><code>8b21911</code></a>
Update toolkit components</li>
<li>See full diff in <a
href="https://github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/kustomize-controller/api` from 1.6.0 to 1.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/releases">github.com/fluxcd/kustomize-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.6.1/CHANGELOG.md">v1.6.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/kustomize-controller:v1.6.1</code></li>
<li><code>ghcr.io/fluxcd/kustomize-controller:v1.6.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md">github.com/fluxcd/kustomize-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.1</h2>
<p><strong>Release date:</strong> 2025-07-08</p>
<p>This patch release fixes a bug introduced in v1.6.0
that causes SOPS decryption with US Government KMS
keys to fail with the error:</p>
<pre><code>STS: AssumeRoleWithWebIdentity, https response error\n
StatusCode: 0, RequestID: ,
request send failed, Post\n
\&quot;https://sts.arn.amazonaws.com/\&quot;: dial tcp:
lookupts.arn.amazonaws.com on 10.100.0.10:53: no such host
</code></pre>
<p>Fixes:</p>
<ul>
<li>Fix regression in STS endpoint for SOPS decryption with AWS KMS in
US Gov partition
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1478">#1478</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/8ec4a6e91f5bb7c0e2faaee4eafde2e25e8c4778"><code>8ec4a6e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1482">#1482</a>
from fluxcd/release-v1.6.1</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/84115f6516e6046b8ccaaa5614d0794a50270f61"><code>84115f6</code></a>
Release v1.6.1</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/2333a7413c6748ed6a9c70abe2e46f7f4e798864"><code>2333a74</code></a>
Add changelog entry for v1.6.1</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/9a203c87755c6561144517eda07721af890f4729"><code>9a203c8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1480">#1480</a>
from fluxcd/backport-1478-to-release/v1.6.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/127d696d336b2b1dfdfe7177eb3d2033c1d8ba91"><code>127d696</code></a>
Fix regression in STS endpoint for SOPS decryption with AWS KMS in US
Gov par...</li>
<li>See full diff in <a
href="https://github.com/fluxcd/kustomize-controller/compare/v1.6.0...v1.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/apis/meta` from 1.13.0 to 1.15.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/9e79277372c4746ff091eba1f10aee82974ecdaa"><code>9e79277</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/968">#968</a> from
cappyzawa/feat/runtime-secrets-pointer-based-api</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9ee2d52b4b66f1fcdc76596ff91fbc1c8907b392"><code>9ee2d52</code></a>
runtime/secrets: migrate to Secret pointer-based APIs</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/e04986eb42b27c86c4de84f287d3b7f106dfd780"><code>e04986e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/967">#967</a> from
fluxcd/bump-pkg</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/59d65f622260d0599c2e10f6ef251815bc36e805"><code>59d65f6</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/607f4b2d84dd87eaeede369ee6a0b193d09f5f18"><code>607f4b2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/966">#966</a> from
fluxcd/update-deps-1.33.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/c895e9f68fcd11db1b172a5e34d43c074cebd0d5"><code>c895e9f</code></a>
Update dependencies to Kubernetes v1.33.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6c8e4c189277f847de135d389691659472bba7e0"><code>6c8e4c1</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/962">#962</a> from
dgunzy/fix/ignore-paths-diff</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/1649a3c36d784d439bb7511aaef47c3c3384437e"><code>1649a3c</code></a>
Add ignorepaths to scan manifests to fix --ignore-paths flag</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/07494843c9ecba2dfe4b0fbf49fe30f923daa146"><code>0749484</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/965">#965</a> from
fluxcd/oci-insecure-transport</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/647e4790e3398ab816b7f6e5b992665b77510d6f"><code>647e479</code></a>
oci: Add <code>insecure</code> option to retry transport</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/apis/meta/v1.13.0...apis/meta/v1.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/runtime` from 0.62.0 to 0.66.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/856b04da5d6039642d10f46fe55c3a1664a6e1dc"><code>856b04d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/970">#970</a> from
cappyzawa/add-client-based-secret-variants</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/14d994dcd5f84bfec2a49621533ebb88b3ac246c"><code>14d994d</code></a>
runtime/secrets: separate API reading from Secret conversion</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/c929dfc8af4906efb300cb39611284da0119f902"><code>c929dfc</code></a>
runtime/secrets: add client-based API variants</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9e79277372c4746ff091eba1f10aee82974ecdaa"><code>9e79277</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/968">#968</a> from
cappyzawa/feat/runtime-secrets-pointer-based-api</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9ee2d52b4b66f1fcdc76596ff91fbc1c8907b392"><code>9ee2d52</code></a>
runtime/secrets: migrate to Secret pointer-based APIs</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/e04986eb42b27c86c4de84f287d3b7f106dfd780"><code>e04986e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/967">#967</a> from
fluxcd/bump-pkg</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/59d65f622260d0599c2e10f6ef251815bc36e805"><code>59d65f6</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/607f4b2d84dd87eaeede369ee6a0b193d09f5f18"><code>607f4b2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/966">#966</a> from
fluxcd/update-deps-1.33.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/c895e9f68fcd11db1b172a5e34d43c074cebd0d5"><code>c895e9f</code></a>
Update dependencies to Kubernetes v1.33.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6c8e4c189277f847de135d389691659472bba7e0"><code>6c8e4c1</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/962">#962</a> from
dgunzy/fix/ignore-paths-diff</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.62.0...runtime/v0.66.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/ssa` from 0.48.0 to 0.51.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/9e79277372c4746ff091eba1f10aee82974ecdaa"><code>9e79277</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/968">#968</a> from
cappyzawa/feat/runtime-secrets-pointer-based-api</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9ee2d52b4b66f1fcdc76596ff91fbc1c8907b392"><code>9ee2d52</code></a>
runtime/secrets: migrate to Secret pointer-based APIs</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/e04986eb42b27c86c4de84f287d3b7f106dfd780"><code>e04986e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/967">#967</a> from
fluxcd/bump-pkg</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/59d65f622260d0599c2e10f6ef251815bc36e805"><code>59d65f6</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/607f4b2d84dd87eaeede369ee6a0b193d09f5f18"><code>607f4b2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/966">#966</a> from
fluxcd/update-deps-1.33.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/c895e9f68fcd11db1b172a5e34d43c074cebd0d5"><code>c895e9f</code></a>
Update dependencies to Kubernetes v1.33.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6c8e4c189277f847de135d389691659472bba7e0"><code>6c8e4c1</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/962">#962</a> from
dgunzy/fix/ignore-paths-diff</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/1649a3c36d784d439bb7511aaef47c3c3384437e"><code>1649a3c</code></a>
Add ignorepaths to scan manifests to fix --ignore-paths flag</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/07494843c9ecba2dfe4b0fbf49fe30f923daa146"><code>0749484</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/965">#965</a> from
fluxcd/oci-insecure-transport</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/647e4790e3398ab816b7f6e5b992665b77510d6f"><code>647e479</code></a>
oci: Add <code>insecure</code> option to retry transport</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/oci/v0.48.0...oci/v0.51.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/version` from 0.8.0 to 0.9.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/b83bd25dbf630244a59993f0a2eb9f134f1d8185"><code>b83bd25</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/817">#817</a> from
fluxcd/refactor-cache</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a29e42fdb280485d329255d10741bdab4e3dd479"><code>a29e42f</code></a>
cache: Return ErrNotFound error from Get()</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/72d6f8c2228e53caaa00ac7d2a6cb026d62289fb"><code>72d6f8c</code></a>
oci: Remove cache from auth and int tests code</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/061b9acc5363c1e84ebe18a6fef1de851185c33c"><code>061b9ac</code></a>
cache: Allow setting cache metrics prefix</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a9610514706535940e96ac3f4defa63a71a583a4"><code>a961051</code></a>
Simplify the cache</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9e2947d30f071b8d9fbf19ec2917bec41c95cce8"><code>9e2947d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/829">#829</a> from
fluxcd/helm-v3.16.3</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/802b6e391625c3f392ec895fd5a206a293743ced"><code>802b6e3</code></a>
Update dependencies</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/19c00ade3475a8672e65d7378bee67f4a91c3860"><code>19c00ad</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/828">#828</a> from
fluxcd/kustomize-v5.5</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f9cbcaf1db8440fc8f7fd8838cc7e6425c6653a7"><code>f9cbcaf</code></a>
Add doc to auth pkg</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/33f38290f8153baa4cd1168ff8dc55dc14d4d6e4"><code>33f3829</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/tar/v0.8.0...tar/v0.9.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/open-component-model/ocm-controller` from 0.26.2 to
0.26.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm-controller/releases">github.com/open-component-model/ocm-controller's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.4</h2>
<h1>Release v0.26.4</h1>
<ul>
<li>fix: adjust the resource controller to use the descriptor version
for defaulting instead of the component version (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/690">#690</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>chore(deps): bump the go group across 1 directory with 3 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/689">#689</a>)</li>
<li>chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in the
go_modules group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/688">#688</a>)</li>
</ul>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): bump the go group across 1 directory with 3 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/689">#689</a>)</li>
<li>chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in the
go_modules group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/688">#688</a>)</li>
</ul>
<h2>v0.26.3</h2>
<h1>Release v0.26.3</h1>
<ul>
<li>fix: use the current component version for the default resource
version (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/684">#684</a>)</li>
<li>fix: default the resource version to component version (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/679">#679</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 6 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/682">#682</a>)</li>
<li>chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to
2.3.0 in the go_modules group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/681">#681</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/677">#677</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/674">#674</a>)</li>
</ul>
<!-- raw HTML omitted -->
<h2>⬆️ Dependencies</h2>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 6 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/682">#682</a>)</li>
<li>chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to
2.3.0 in the go_modules group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/681">#681</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/677">#677</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/674">#674</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/5b122fac2d84504c111cd8313fe279567551e9d4"><code>5b122fa</code></a>
chore: release docs for v0.26.4 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/691">#691</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/b5bbb6da433cb931811f1c55f0d04a97cc161e1d"><code>b5bbb6d</code></a>
chore(deps): bump the go group across 1 directory with 3 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/689">#689</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/415ee58c7bf6592de27c67899ede1577bfdd3c27"><code>415ee58</code></a>
fix: adjust the resource controller to use the descriptor version for
default...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/d5f265754dabc098df9d294422fa23b0df042391"><code>d5f2657</code></a>
chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 in the
go_modules gro...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/db4777ff2be237342d450301c053eb5ee7eeabc7"><code>db4777f</code></a>
chore(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 in the ci
group (...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/a6a3e0314a29c16b593254e3823225d6ba1d2327"><code>a6a3e03</code></a>
chore: release notes and version update for v0.26.3 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/685">#685</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/4a58167117de32f0e3e9ebed5d10acb934914720"><code>4a58167</code></a>
fix: use the current component version for the default resource version
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/684">#684</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/3929cc164ee233684fa604c0500fa8681749b76e"><code>3929cc1</code></a>
chore(deps): bump github/codeql-action from 3.29.1 to 3.29.2 in the ci
group ...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/d679059adbadfc69f2826c74f889d355e7c9c80b"><code>d679059</code></a>
chore(deps): bump the go group with 6 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/682">#682</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/ee3a135ee8f9fbc82b85d20b5c2f2b7a8a384a77"><code>ee3a135</code></a>
chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to
2.3.0 in ...</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm-controller/compare/v0.26.2...v0.26.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `ocm.software/ocm` from 0.25.0 to 0.26.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm/releases">ocm.software/ocm's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>‼️ Breaking Changes</h3>
<ul>
<li>chore!: migrate to native cobra library by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1504">open-component-model/ocm#1504</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<!-- raw HTML omitted -->
<ul>
<li>fix: git access tar methods by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1454">open-component-model/ocm#1454</a></li>
<li>fix(revert): make sure that ref is an option in the gitHub
AccessMethod (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1406">#1406</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1460">open-component-model/ocm#1460</a></li>
<li>fix: allow spec compliant, but unusually ordered HELM Chart OCI
Artifacts in HELM OCI Artifact downloader by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1470">open-component-model/ocm#1470</a></li>
<li>fix: allow pre-v3.7.0 HELM Charts in HELM OCI Artifact downloader by
<a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1476">open-component-model/ocm#1476</a></li>
<li>fix: use the updated link checker fork by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1475">open-component-model/ocm#1475</a></li>
<li>fix: make sure that helm downloader does not overwrite chart with
provenance data by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1481">open-component-model/ocm#1481</a></li>
<li>chore: fix correct filename for provenance file by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1492">open-component-model/ocm#1492</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>⬆️ Dependencies</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1452">open-component-model/ocm#1452</a></li>
<li>chore: pin cosign to commit to make sure we are security compliant
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1459">open-component-model/ocm#1459</a></li>
<li>chore(deps): bump the go group with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1465">open-component-model/ocm#1465</a></li>
<li>chore(deps): bump the go group with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1487">open-component-model/ocm#1487</a></li>
<li>chore(deps): bump distroless/static-debian12 from to by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1486">open-component-model/ocm#1486</a></li>
<li>chore(deps): bump the go group with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1493">open-component-model/ocm#1493</a></li>
<li>chore(deps): bump the go group with 10 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1502">open-component-model/ocm#1502</a></li>
<li>chore(deps): bump the go group with 8 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1513">open-component-model/ocm#1513</a></li>
<li>chore(deps): bump distroless/static-debian12 from to by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1512">open-component-model/ocm#1512</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>🧰 Maintenance</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore: bump VERSION to 0.26.0-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1443">open-component-model/ocm#1443</a></li>
<li>chore: GitHub actions add permissions by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1449">open-component-model/ocm#1449</a></li>
<li>chore: sanitize log by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1450">open-component-model/ocm#1450</a></li>
<li>chore: adjust GHA permissions by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1451">open-component-model/ocm#1451</a></li>
<li>chore: remove winget by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1463">open-component-model/ocm#1463</a></li>
<li>chore: use ternary operator to avoid &quot;skipped&quot; integration
test job by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1490">open-component-model/ocm#1490</a></li>
<li>docs: ecrplugin readme by <a
href="https://github.com/ikhandamirov"><code>@​ikhandamirov</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1482">open-component-model/ocm#1482</a></li>
</ul>
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm/commit/4c74991b8b57ecec2908a657a779051d7d620bb9"><code>4c74991</code></a>
chore(deps): bump nosborn/github-action-markdown-cli from 3.4.0 to 3.5.0
in t...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/7bc621fe448d5664b846320984631f58e8ca344e"><code>7bc621f</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1514">#1514</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/c27b5e10fa2ca9129f74893a3f60e7db61984fa1"><code>c27b5e1</code></a>
chore(deps): bump distroless/static-debian12 from <code>188ddfb</code>
to <code>627d6c5</code> (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1512">#1512</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/d74f4c64f3eb4e8d50957c6a0031af11052dfc1e"><code>d74f4c6</code></a>
chore(deps): bump the go group with 8 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1513">#1513</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/d2f8fdca4067f3469668b513486d88edff57278c"><code>d2f8fdc</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1510">#1510</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/ceea43377a381101ecf75e5b2420b7d263f53523"><code>ceea433</code></a>
chore!: migrate to native cobra library (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1504">#1504</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/073a4edc1452a9ebd3922085cec843cbe1bbc270"><code>073a4ed</code></a>
chore(deps): bump github/codeql-action from 3.28.19 to 3.29.0 in the ci
group...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/3360f7978650d7a04bb52b7358fffab1f7329876"><code>3360f79</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1503">#1503</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/ca24589a12bd92e4a861a2afc6596db46fc497f4"><code>ca24589</code></a>
chore(deps): bump the go group with 10 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1502">#1502</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/c2006477ffd078787d488b4bdea870a015df5d4b"><code>c200647</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1499">#1499</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm/compare/v0.25...v0.26">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -9,39 +9,39 @@ replace github.com/texttheater/golang-levenshtein => github.com/texttheater/gola
 
 require (
 	code.gitea.io/sdk/gitea v0.21.0
-	github.com/fluxcd/cli-utils v0.36.0-flux.13
-	github.com/fluxcd/flux2/v2 v2.6.3
+	github.com/fluxcd/cli-utils v0.36.0-flux.14
+	github.com/fluxcd/flux2/v2 v2.6.4
 	github.com/fluxcd/helm-controller/api v1.3.0
 	github.com/fluxcd/image-automation-controller/api v0.41.2
 	github.com/fluxcd/image-reflector-controller/api v0.35.2
-	github.com/fluxcd/kustomize-controller/api v1.6.0
+	github.com/fluxcd/kustomize-controller/api v1.6.1
 	github.com/fluxcd/notification-controller/api v1.6.0
-	github.com/fluxcd/pkg/apis/meta v1.13.0
-	github.com/fluxcd/pkg/runtime v0.62.0
-	github.com/fluxcd/pkg/ssa v0.48.0
-	github.com/fluxcd/pkg/version v0.8.0
+	github.com/fluxcd/pkg/apis/meta v1.15.0
+	github.com/fluxcd/pkg/runtime v0.66.0
+	github.com/fluxcd/pkg/ssa v0.51.0
+	github.com/fluxcd/pkg/version v0.9.0
 	github.com/fluxcd/source-controller/api v1.6.2
 	github.com/open-component-model/git-controller v0.12.1
-	github.com/open-component-model/ocm-controller v0.26.2
+	github.com/open-component-model/ocm-controller v0.26.4
 	github.com/open-component-model/replication-controller v0.13.1
 	k8s.io/api v0.33.2
 	k8s.io/apiextensions-apiserver v0.33.2
 	k8s.io/apimachinery v0.33.2
 	k8s.io/cli-runtime v0.33.2
 	k8s.io/client-go v0.33.2
-	ocm.software/ocm v0.25.0
+	ocm.software/ocm v0.26.0
 	sigs.k8s.io/controller-runtime v0.21.0
 	sigs.k8s.io/e2e-framework v0.6.0
 	sigs.k8s.io/kustomize/api v0.20.0
 	sigs.k8s.io/yaml v1.5.0
 )
 
 require (
-	cloud.google.com/go/auth v0.15.0 // indirect
+	cloud.google.com/go/auth v0.16.0 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
 	cloud.google.com/go/compute/metadata v0.6.0 // indirect
 	cuelabs.dev/go/oci/ociregistry v0.0.0-20250304105642-27e071d2c9b1 // indirect
-	dario.cat/mergo v1.0.1 // indirect
+	dario.cat/mergo v1.0.2 // indirect
 	github.com/42wim/httpsig v1.2.2 // indirect
 	github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.15.2 // indirect
 	github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
@@ -56,7 +56,7 @@ require (
 	github.com/Azure/go-autorest/tracing v0.6.0 // indirect
 	github.com/InfiniteLoopSpace/go_S-MIME v0.0.0-20181221134359-3f58f9a4b2b6 // indirect
 	github.com/MakeNowJust/heredoc v1.0.0 // indirect
-	github.com/Masterminds/semver/v3 v3.3.1 // indirect
+	github.com/Masterminds/semver/v3 v3.4.0 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/ProtonMail/go-crypto v1.2.0 // indirect
 	github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
@@ -75,32 +75,32 @@ require (
 	github.com/alibabacloud-go/tea-xml v1.1.3 // indirect
 	github.com/aliyun/credentials-go v1.3.10 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
-	github.com/aws/aws-sdk-go-v2 v1.36.3 // indirect
+	github.com/aws/aws-sdk-go-v2 v1.36.4 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 // indirect
-	github.com/aws/aws-sdk-go-v2/config v1.29.14 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.17.67 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.74 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
+	github.com/aws/aws-sdk-go-v2/config v1.29.16 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.69 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.31 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.79 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.35 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.35 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.44.0 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.35 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.44.2 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.33.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.1 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.79.3 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.33.19 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.16 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.16 // indirect
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.80.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.25.4 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.33.21 // indirect
 	github.com/aws/smithy-go v1.22.3 // indirect
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.9.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect
 	github.com/blang/semver/v4 v4.0.0 // indirect
-	github.com/buildkite/agent/v3 v3.95.1 // indirect
+	github.com/buildkite/agent/v3 v3.97.0 // indirect
 	github.com/buildkite/go-pipeline v0.13.3 // indirect
 	github.com/buildkite/interpolate v0.1.5 // indirect
 	github.com/buildkite/roko v1.3.1 // indirect
@@ -116,6 +116,7 @@ require (
 	github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
 	github.com/containerd/containerd v1.7.27 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
+	github.com/containerd/errdefs/pkg v0.3.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v0.2.1 // indirect
 	github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
@@ -133,9 +134,9 @@ require (
 	github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v28.1.1+incompatible // indirect
+	github.com/docker/cli v28.2.2+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
-	github.com/docker/docker v28.1.1+incompatible // indirect
+	github.com/docker/docker v28.2.2+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.9.3 // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
@@ -150,7 +151,7 @@ require (
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fluxcd/pkg/apis/acl v0.7.0 // indirect
-	github.com/fluxcd/pkg/apis/kustomize v1.10.0 // indirect
+	github.com/fluxcd/pkg/apis/kustomize v1.11.0 // indirect
 	github.com/fluxcd/pkg/kustomize v1.18.0 // indirect
 	github.com/fluxcd/pkg/tar v0.12.0 // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
@@ -188,9 +189,9 @@ require (
 	github.com/golang/snappy v0.0.4 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/certificate-transparency-go v1.3.1 // indirect
-	github.com/google/gnostic-models v0.6.9 // indirect
+	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/google/go-containerregistry v0.20.3 // indirect
+	github.com/google/go-containerregistry v0.20.4-0.20250225234217-098045d5e61f // indirect
 	github.com/google/go-github/v45 v45.2.0 // indirect
 	github.com/google/go-github/v55 v55.0.0 // indirect
 	github.com/google/go-querystring v1.1.0 // indirect
@@ -201,11 +202,11 @@ require (
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gowebpki/jcs v1.0.1 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
-	github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
+	github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
 	github.com/hashicorp/go-rootcerts v1.0.2 // indirect
 	github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
 	github.com/hashicorp/go-version v1.7.0 // indirect
@@ -271,10 +272,10 @@ require (
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/prometheus/client_golang v1.22.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.63.0 // indirect
-	github.com/prometheus/procfs v0.16.1 // indirect
+	github.com/prometheus/common v0.65.0 // indirect
+	github.com/prometheus/procfs v0.17.0 // indirect
 	github.com/protocolbuffers/txtpbfmt v0.0.0-20250129171521-feedd8250727 // indirect
-	github.com/redis/go-redis/v9 v9.8.0 // indirect
+	github.com/redis/go-redis/v9 v9.10.0 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/ryanuber/go-glob v1.0.0 // indirect
@@ -284,13 +285,13 @@ require (
 	github.com/segmentio/ksuid v1.0.4 // indirect
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
 	github.com/shibumi/go-pathspec v1.3.0 // indirect
-	github.com/sigstore/cosign/v2 v2.5.0 // indirect
-	github.com/sigstore/fulcio v1.6.6 // indirect
+	github.com/sigstore/cosign/v2 v2.5.1-0.20250508191124-dfa6abe891e2 // indirect
+	github.com/sigstore/fulcio v1.7.1 // indirect
 	github.com/sigstore/protobuf-specs v0.4.1 // indirect
 	github.com/sigstore/rekor v1.3.10 // indirect
-	github.com/sigstore/sigstore v1.9.4 // indirect
-	github.com/sigstore/sigstore-go v0.7.1 // indirect
-	github.com/sigstore/timestamp-authority v1.2.5 // indirect
+	github.com/sigstore/sigstore v1.9.5 // indirect
+	github.com/sigstore/sigstore-go v0.7.2 // indirect
+	github.com/sigstore/timestamp-authority v1.2.6 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/skeema/knownhosts v1.3.1 // indirect
 	github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
@@ -327,35 +328,35 @@ require (
 	gitlab.com/gitlab-org/api/client-go v0.128.0 // indirect
 	go.mongodb.org/mongo-driver v1.17.1 // indirect
 	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
-	go.opentelemetry.io/otel v1.35.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect
+	go.opentelemetry.io/otel v1.37.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.32.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 // indirect
-	go.opentelemetry.io/otel/metric v1.35.0 // indirect
+	go.opentelemetry.io/otel/metric v1.37.0 // indirect
 	go.opentelemetry.io/otel/sdk v1.35.0 // indirect
-	go.opentelemetry.io/otel/sdk/metric v1.34.0 // indirect
-	go.opentelemetry.io/otel/trace v1.35.0 // indirect
+	go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
+	go.opentelemetry.io/otel/trace v1.37.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.5.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
-	go.yaml.in/yaml/v3 v3.0.3 // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.39.0 // indirect
-	golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67 // indirect
+	golang.org/x/exp v0.0.0-20250305212735-054e65f0b394 // indirect
 	golang.org/x/mod v0.25.0 // indirect
-	golang.org/x/net v0.40.0 // indirect
-	golang.org/x/oauth2 v0.29.0 // indirect
-	golang.org/x/sync v0.15.0 // indirect
-	golang.org/x/sys v0.33.0 // indirect
-	golang.org/x/term v0.32.0 // indirect
-	golang.org/x/text v0.26.0 // indirect
-	golang.org/x/time v0.11.0 // indirect
-	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
-	google.golang.org/api v0.228.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250313205543-e70fdf4c4cb4 // indirect
-	google.golang.org/grpc v1.71.0 // indirect
+	golang.org/x/net v0.41.0 // indirect
+	golang.org/x/oauth2 v0.30.0 // indirect
+	golang.org/x/sync v0.16.0 // indirect
+	golang.org/x/sys v0.34.0 // indirect
+	golang.org/x/term v0.33.0 // indirect
+	golang.org/x/text v0.27.0 // indirect
+	golang.org/x/time v0.12.0 // indirect
+	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
+	google.golang.org/api v0.230.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20250414145226-207652e42e2e // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250414145226-207652e42e2e // indirect
+	google.golang.org/grpc v1.72.0 // indirect
 	google.golang.org/protobuf v1.36.6 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
@@ -367,9 +368,9 @@ require (
 	helm.sh/helm/v3 v3.18.4 // indirect
 	k8s.io/component-base v0.33.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
+	k8s.io/kube-openapi v0.0.0-20250701173324-9bd5c66d9911 // indirect
 	k8s.io/kubectl v0.33.2 // indirect
-	k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e // indirect
+	k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 // indirect
 	oras.land/oras-go/v2 v2.6.0 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
 	sigs.k8s.io/kustomize/kyaml v0.20.0 // indirect