build(deps): bump the gomod group across 1 directory with 11 updates

[dependabot]

Bumps the gomod group with 6 updates in the / directory:

Package	From	To
github.com/BurntSushi/toml	1.5.0	1.6.0
google.golang.org/grpc	1.77.0	1.78.0
k8s.io/api	0.34.3	0.35.0
k8s.io/client-go	0.34.3	0.35.0
k8s.io/mount-utils	0.34.3	0.35.0
github.com/google/go-querystring	1.1.0	1.2.0

Updates github.com/BurntSushi/toml from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.6.0

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:

• Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.

• Using duplicate array keys would not give an error:

  arr = [1]
  arr = [2]
  

  This will now correctly give a "Key 'arr' has already been defined" error.

Commits

• 5253492 Enable TOML 1.1 by default (#457)
• e954445 Reject duplicate arrays (#455)
• 6b16cbd Update toml-test test cases from upstream (#456)
• 011fa2b Ensure constant format strings in wf calls
• 4b439bf Remove itemNil
• a473c12 Add test for out of range float64
• b535ff8 Add some boring tests for lex.go
• 6011ef0 Remove unreachable condition in lexTableNameStart
• c8ca9e6 Remove unreachable condition
• 1121f81 Make tomlv read from stdin
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.77.0 to 1.78.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.78.0

Behavior Changes

• client: Reject target URLs containing unbracketed colons in the hostname in Go version 1.26+. (#8716)
  • Special Thanks: @​neild

New Features

• stats/otel: Add backend service label to wrr metrics as part of A89. (#8737)
• stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#8738)
• client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#8746)
  • Special Thanks: @​twz123

Bug Fixes

• transport/client : Return status code Unknown on malformed grpc-status. (#8735)
• client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#8718)
  • Special Thanks: @​iblancasa
• xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#8723)
• xds/resolver:
  • Drop previous route resources and report an error when no matching virtual host is found.
  • Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#8711)
• client:
  • Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
  • Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
  • Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
  • Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#8710)
• xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#8627)

Performance Improvements

• mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#8705)
  • Special Thanks: @​cjc25

Commits

• 9df039e Change version to 1.78.0 (#8761)
• 9b990b6 gracefulswitch: Wait for all goroutines on close (#8746)
• 6677d9a xds: Fixing a typo (#8760)
• d35cedd xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (#8740)
• d931fdc client: allow overriding grpc-accept-encoding header (#8718)
• 0800ec7 xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...
• 6553ea1 stats/otel: Add subchannel metrics (A94) (#8738)
• 81a00ce grpc: Fixing spelling typo (#8756)
• e413838 client: Change connectivity state to CONNECTING when creating the name resolv...
• f9d2bdb stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (#8737)
• Additional commits viewable in compare view

Updates k8s.io/api from 0.34.3 to 0.35.0

Commits

• 9afe7de Update dependencies to v0.35.0 tag
• bbcbaa8 Merge remote-tracking branch 'origin/master' into release-1.35
• 5bced61 Bump golang.org/x/crypto to v0.45.0
• 39e2e26 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• c22b4a1 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• e3b1f3d Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• 3da327c Update vendored dependencies
• c764b44 Merge pull request #132919 from ndixita/pod-level-in-place-pod-resize
• aced136 Generated files from API changes
• 02d790d Adding Resources and AllocatedResoures fields to the list of expected fields ...
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.34.3 to 0.35.0

Commits

• 72d71ea Merge remote-tracking branch 'origin/master' into release-1.35
• e2a2dbc Bump golang.org/x/crypto to v0.45.0
• 2e9c228 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• f274aac vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• 9445443 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• 52154f7 Update vendored dependencies
• 5a348c5 KEP-5471: Extend tolerations operators (#134665)
• 6f89492 Merge pull request #133648 from richabanker/merged-discovery
• c77dde2 util/sort: Add MergePreservingRelativeOrder for topological sorting
• 729c13d Merge pull request #134624 from yt2985/podcertificates-beta
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.34.3 to 0.35.0

Commits

• 9bcb694 Update dependencies to v0.35.0 tag
• 2d83546 Merge remote-tracking branch 'origin/master' into release-1.35
• 56b4af2 Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-f...
• 891f94c Merge remote-tracking branch 'origin/master' into release-1.35
• 65ffe04 Merge pull request #135580 from serathius/client-go-transformer
• 2fe4ac2 downgrade reflector watchlist fallback log to V(4)
• 97256a6 Bump golang.org/x/crypto to v0.45.0
• 46360b5 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• 171ef8c Use transformer in consistency checker
• 3878a64 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• Additional commits viewable in compare view

Updates k8s.io/mount-utils from 0.34.3 to 0.35.0

Commits

• efda6a1 Merge remote-tracking branch 'origin/master' into release-1.35
• 21f7caa Bump golang.org/x/crypto to v0.45.0
• 72562d2 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• 9d04d56 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• ce1a365 Update vendored dependencies
• 92fe232 Merge pull request #135004 from pohly/dependencies-x-repos
• d9d54ad dependencies: various minor updates
• 54422a1 Merge pull request #134780 from joshjms/bump-etcd-sdk-v3.6.5
• e1d462c etcd: bump etcd sdk to v3.6.5
• 304d3a1 Merge pull request #134120 from BenTheElder/golang-language-125
• Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20250604170112-4c0f3b243397 to 0.0.0-20251002143259-bc988d571ff4

Commits

• See full diff in compare view

Updates github.com/google/go-querystring from 1.1.0 to 1.2.0

Release notes

Sourced from github.com/google/go-querystring's releases.

v1.2.0

A lot of version bumps, though mostly actually of GitHub Actions that have nothing to do with the package itself.

Two minor code optimizations:

• code opt: prioritize handling boundary conditions by @​hcraM41 in google/go-querystring#149
• code opt: replace bytes.Buffer with strings.Builder by @​hcraM41 in google/go-querystring#151

Full Changelog: google/go-querystring@v1.1.0...v1.2.0

Commits

• 59c17d9 Bump golangci/golangci-lint-action from 7.0.0 to 9.0.0
• b8825f6 go.mod,.github: Go 1.13 is the minimum version
• 243d79a update github action workflow versions
• b64aef0 code opt: replace bytes.Buffer with strings.Builder
• ffb7deb code opt: prioritize handling boundary conditions
• 085cc78 Bump golangci/golangci-lint-action from 5.0.0 to 6.0.1
• d887f37 Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
• d6a1024 go.mod,.github: update dependencies
• 7af347e Bump codecov/codecov-action from 3.1.4 to 3.1.5
• 3455b53 Bump codecov/codecov-action from 3.1.3 to 3.1.4
• Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20251022142026-3a174f9686a8 to 0.0.0-20251029180050-ab9386a59fda

Commits

• See full diff in compare view

Updates k8s.io/kube-openapi from 0.0.0-20250710124328-f3f2b991d03b to 0.0.0-20250910181357-589584f1c912

Commits

• See full diff in compare view

Updates sigs.k8s.io/json from 0.0.0-20241014173422-cfa47c3a1cc8 to 0.0.0-20250730193827-2d320260d730

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions