chore(deps): bump the minor-and-patch group across 1 directory with 5 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the / directory: github.com/golang-jwt/jwt/v5, github.com/trivago/go-bootstrap and github.com/trivago/go-kubernetes/v4.

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

• Add spellcheck Github action to catch common spelling mistakes by @​equalsgibson in golang-jwt/jwt#458
• Add WithNotBeforeRequired parser option and add test coverage by @​equalsgibson in golang-jwt/jwt#456
• Update godoc example func to properly refer to NewWithClaims() by @​equalsgibson in golang-jwt/jwt#459
• Update github workflows by @​mfridman in golang-jwt/jwt#462
• Additional test for CustomClaims that validates unmarshalling behaviour by @​equalsgibson in golang-jwt/jwt#457
• Fix early file close in jwt cli by @​mfridman in golang-jwt/jwt#472
• Add TPM signature reference by @​salrashid123 in golang-jwt/jwt#473
• Remove misleading ParserOptions documentation in golang-jwt/jwt#484
• Save signature to Token struct after successful signing by @​EgorSheff in golang-jwt/jwt#417
• Set token.Signature in ParseUnverified by @​slickwilli in golang-jwt/jwt#414

👒 Dependencies

• Bump crate-ci/typos from 1.34.0 to 1.35.3 by @​dependabot[bot] in golang-jwt/jwt#461
• Bump crate-ci/typos from 1.35.4 to 1.36.2 by @​dependabot[bot] in golang-jwt/jwt#470
• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in golang-jwt/jwt#478
• Bump crate-ci/typos from 1.36.2 to 1.39.0 by @​dependabot[bot] in golang-jwt/jwt#480
• Bump golangci/golangci-lint-action from 8 to 9 by @​dependabot[bot] in golang-jwt/jwt#481
• Bump actions/setup-go from 5 to 6 by @​dependabot[bot] in golang-jwt/jwt#469
• Bump crate-ci/typos from 1.39.0 to 1.40.0 by @​dependabot[bot] in golang-jwt/jwt#488
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in golang-jwt/jwt#487
• Bump crate-ci/typos from 1.40.0 to 1.41.0 by @​dependabot[bot] in golang-jwt/jwt#490
• Bump crate-ci/typos from 1.41.0 to 1.42.1 by @​dependabot[bot] in golang-jwt/jwt#492

New Contributors

• @​equalsgibson made their first contribution in golang-jwt/jwt#458
• @​salrashid123 made their first contribution in golang-jwt/jwt#473
• @​EgorSheff made their first contribution in golang-jwt/jwt#417
• @​slickwilli made their first contribution in golang-jwt/jwt#414

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits

• 7ceae61 Add release.yml for changelog configuration
• dce8e4d Set token.Signature in ParseUnverified (#414)
• 8889e20 Save signature to Token struct after successful signing (#417)
• d237f82 ci: update github-actions schedule interval to monthly
• d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
• e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
• e6a0afa Bump actions/checkout from 5 to 6 (#487)
• 9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
• 60a8669 Bump actions/setup-go from 5 to 6 (#469)
• 76f5828 Remove misleading ParserOptions documentation (#484)
• Additional commits viewable in compare view

Updates github.com/trivago/go-bootstrap from 1.3.1 to 1.3.2

Release notes

Sourced from github.com/trivago/go-bootstrap's releases.

v1.3.2

1.3.2 (2026-01-29)

Bug Fixes

• security: bump github.com/quic-go/quic-go from 0.54.1 to 0.57.0 (#19) (67051b7)
• security: bump golang.org/x/crypto from 0.42.0 to 0.45.0 (#18) (7795d4b)

Changelog

Sourced from github.com/trivago/go-bootstrap's changelog.

1.3.2 (2026-01-29)

Bug Fixes

• security: bump github.com/quic-go/quic-go from 0.54.1 to 0.57.0 (#19) (67051b7)
• security: bump golang.org/x/crypto from 0.42.0 to 0.45.0 (#18) (7795d4b)

Commits

• b1f2223 chore(main): release 1.3.2 (#20)
• 5b0067a fix end-of-file linter complaint
• ad3e94d run go mod tidy
• 67051b7 fix(security): bump github.com/quic-go/quic-go from 0.54.1 to 0.57.0 (#19)
• 7795d4b fix(security): bump golang.org/x/crypto from 0.42.0 to 0.45.0 (#18)
• 2ec6032 migrate to dependabot
• 38b6301 add maintenance section
• See full diff in compare view

Updates github.com/trivago/go-kubernetes/v4 from 4.1.0 to 4.2.0

Release notes

Sourced from github.com/trivago/go-kubernetes/v4's releases.

v4.2.0

4.2.0 (2026-01-29)

Features

• bump the minor-and-patch group across 1 directory with 2 updates and update to go 1.25 (#55) (65a3759)

v4.1.1

4.1.1 (2026-01-29)

Bug Fixes

• security: bump github.com/quic-go/quic-go from 0.56.0 to 0.57.0 (#54) (c9bfe93)
• security: bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#52) (41497a3)
• security: bump golang.org/x/crypto from 0.45.0 to 0.47.0 (#56) (e3d04ea)

Changelog

Sourced from github.com/trivago/go-kubernetes/v4's changelog.

4.2.0 (2026-01-29)

Features

• bump the minor-and-patch group across 1 directory with 2 updates and update to go 1.25 (#55) (65a3759)

4.1.1 (2026-01-29)

Bug Fixes

• security: bump github.com/quic-go/quic-go from 0.56.0 to 0.57.0 (#54) (c9bfe93)
• security: bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#52) (41497a3)
• security: bump golang.org/x/crypto from 0.45.0 to 0.47.0 (#56) (e3d04ea)

Miscellaneous

• run go mod tidy (b8a2bee)
• run go mod tidy (58ef5d0)

Commits

• 993f877 chore(main): release 4.2.0 (#58)
• 65a3759 feat: bump the minor-and-patch group across 1 directory with 2 updates and up...
• 4e0bec4 chore(main): release 4.1.1 (#57)
• b8a2bee chore: run go mod tidy
• e3d04ea fix(security): bump golang.org/x/crypto from 0.45.0 to 0.47.0 (#56)
• 58ef5d0 chore: run go mod tidy
• c9bfe93 fix(security): bump github.com/quic-go/quic-go from 0.56.0 to 0.57.0 (#54)
• 41497a3 fix(security): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#52)
• 9cd575d fix(security): bump golang.org/x/crypto from 0.32.0 to 0.45.0 in /cmd/demo in...
• See full diff in compare view

Updates golang.org/x/net from 0.47.0 to 0.48.0

Commits

• 35e1306 go.mod: update golang.org/x dependencies
• 7c36036 http2, webdav, websocket: fix %q verb uses with wrong type
• ec11ecc trace: fix data race in RenderEvents
• bff14c5 http2: don't PING a responsive server when resetting a stream
• 88a6421 dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage
• 123d099 http2: support net/http.Transport.NewClientConn
• 346cc61 webdav: relax test to check for any redirect status, not just 301
• See full diff in compare view

Updates k8s.io/apimachinery from 0.34.1 to 0.35.0

Commits

• 72d71ea Merge remote-tracking branch 'origin/master' into release-1.35
• e2a2dbc Bump golang.org/x/crypto to v0.45.0
• 2e9c228 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• f274aac vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• 9445443 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• 52154f7 Update vendored dependencies
• 5a348c5 KEP-5471: Extend tolerations operators (#134665)
• 6f89492 Merge pull request #133648 from richabanker/merged-discovery
• c77dde2 util/sort: Add MergePreservingRelativeOrder for topological sorting
• 729c13d Merge pull request #134624 from yt2985/podcertificates-beta
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions