Bump the go-deps group across 10 directories with 18 updates

[dependabot]

Bumps the go-deps group with 1 update in the / directory: k8s.io/code-generator.
Bumps the go-deps group with 1 update in the /hack directory: k8s.io/code-generator.
Bumps the go-deps group with 3 updates in the /tools/create-tink-keyset directory: github.com/sigstore/rekor-tiles/v2, github.com/tink-crypto/tink-go-gcpkms/v2 and github.com/tink-crypto/tink-go/v2.
Bumps the go-deps group with 5 updates in the /tools/ctlog directory:

Package	From	To
k8s.io/apimachinery	0.35.3	0.36.2
k8s.io/client-go	0.35.3	0.36.2
github.com/sigstore/sigstore	1.10.5	1.10.8
github.com/sigstore/fulcio	1.8.5	1.8.7
github.com/sigstore/rekor	1.5.1	1.5.2

Bumps the go-deps group with 2 updates in the /tools/fulcio directory: k8s.io/client-go and go.step.sm/crypto.
Bumps the go-deps group with 2 updates in the /tools/rekor directory: k8s.io/client-go and go.step.sm/crypto.
Bumps the go-deps group with 2 updates in the /tools/secret directory: k8s.io/apimachinery and k8s.io/client-go.
Bumps the go-deps group with 5 updates in the /tools/trillian directory:

Package	From	To
github.com/go-sql-driver/mysql	1.9.3	1.10.0
google.golang.org/grpc	1.80.0	1.81.1
k8s.io/apimachinery	0.35.3	0.36.2
k8s.io/client-go	0.35.3	0.36.2
chainguard.dev/exitdir	0.0.2	0.0.3

Bumps the go-deps group with 4 updates in the /tools/tsa directory: k8s.io/apimachinery, k8s.io/client-go, github.com/sigstore/sigstore and github.com/sigstore/timestamp-authority/v2.
Bumps the go-deps group with 4 updates in the /tools/tuf directory: k8s.io/apimachinery, k8s.io/client-go, github.com/sigstore/rekor-tiles/v2 and github.com/sigstore/sigstore-go.

Updates k8s.io/code-generator from 0.35.3 to 0.36.2

Commits

• c64281a Update dependencies to v0.36.2 tag
• a85207c Merge remote-tracking branch 'origin/master' into release-1.36
• 634d8b3 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• a8853d1 Merge pull request #137772 from lalitc375/fix-linter
• eae1aca Merge pull request #137864 from yongruilin/dv-dra-mismatch
• 6770f5f Merge pull request #137846 from lalitc375/required-forbidden
• 9681623 Add slice and map union member support with tests
• 6c2d782 Add nil OldValue test coverage for union doc_tests
• f4e4b3a Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 8a4544d Add tests for validateTrueBeta and ValidateTrueAlpha
• Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5

Commits

• See full diff in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.35.3 to 0.36.2

Commits

• c64281a Update dependencies to v0.36.2 tag
• a85207c Merge remote-tracking branch 'origin/master' into release-1.36
• 634d8b3 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• a8853d1 Merge pull request #137772 from lalitc375/fix-linter
• eae1aca Merge pull request #137864 from yongruilin/dv-dra-mismatch
• 6770f5f Merge pull request #137846 from lalitc375/required-forbidden
• 9681623 Add slice and map union member support with tests
• 6c2d782 Add nil OldValue test coverage for union doc_tests
• f4e4b3a Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 8a4544d Add tests for validateTrueBeta and ValidateTrueAlpha
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5

Commits

• See full diff in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.35.3 to 0.36.2

Commits

• c64281a Update dependencies to v0.36.2 tag
• a85207c Merge remote-tracking branch 'origin/master' into release-1.36
• 634d8b3 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• a8853d1 Merge pull request #137772 from lalitc375/fix-linter
• eae1aca Merge pull request #137864 from yongruilin/dv-dra-mismatch
• 6770f5f Merge pull request #137846 from lalitc375/required-forbidden
• 9681623 Add slice and map union member support with tests
• 6c2d782 Add nil OldValue test coverage for union doc_tests
• f4e4b3a Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 8a4544d Add tests for validateTrueBeta and ValidateTrueAlpha
• Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.35.3 to 0.36.2

Commits

• c64281a Update dependencies to v0.36.2 tag
• a85207c Merge remote-tracking branch 'origin/master' into release-1.36
• 634d8b3 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• a8853d1 Merge pull request #137772 from lalitc375/fix-linter
• eae1aca Merge pull request #137864 from yongruilin/dv-dra-mismatch
• 6770f5f Merge pull request #137846 from lalitc375/required-forbidden
• 9681623 Add slice and map union member support with tests
• 6c2d782 Add nil OldValue test coverage for union doc_tests
• f4e4b3a Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 8a4544d Add tests for validateTrueBeta and ValidateTrueAlpha
• Additional commits viewable in compare view

Updates github.com/sigstore/rekor-tiles/v2 from 2.2.1 to 2.3.0

Release notes

Sourced from github.com/sigstore/rekor-tiles/v2's releases.

v2.3.0

What's Changed

v2.3.0 drops support for the DSSE entry type. All Sigstore SDKs will now upload DSSEs as hashedrekord entries, to support uploading large DSSEs, such as signed SBOMs, for the public instance. We strongly recommend not relying on the previous DSSE type in any way, as going forward, there will only be one supported entry type.

Breaking Changes

• Drop DSSE support in sigstore/rekor-tiles#744

Library Features

• Add ToEntryHash and VerifyLogEntryWithHash in sigstore/rekor-tiles#787

Fixes

• don't return full panic in user-facing error message in sigstore/rekor-tiles#707
• ensure error can be Unwrapped in sigstore/rekor-tiles#710
• defensive fix if err is wrapped in sigstore/rekor-tiles#708
• Limit client response reads, set default timeouts, and validate digest sizes in sigstore/rekor-tiles#806

Full Changelog: sigstore/rekor-tiles@v2.2.1...v2.3.0

Commits

• fa390b1 Drop DSSE support (#744)
• cc556d2 Bump zizmorcore/zizmor from 1.19.0 to 1.25.2 (#799)
• 89af73c Bump golangci/golangci-lint from v2.7.2 to v2.12.2 (#796)
• 4ba10fe Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.102.2 (#822)
• 057d8d8 Bump google.golang.org/api from 0.280.0 to 0.283.0 (#820)
• 73c5d83 Bump go.opentelemetry.io/otel/exporters/prometheus from 0.65.0 to 0.66.0 (#819)
• 1acc2a2 Bump the go-patch-updates group across 1 directory with 4 updates (#818)
• 67a318a Bump github/codeql-action from 4.35.5 to 4.36.1 (#817)
• 76fd5d6 workflows: Bump codecov to fix CI (#823)
• a88619d Bump the docker-compose-patch-updates group across 2 directories with 1 updat...
• Additional commits viewable in compare view

Updates github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.3.0

Release notes

Sourced from github.com/tink-crypto/tink-go-gcpkms/v2's releases.

Tink Go Google Cloud KMS Extension v2.3.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Go GCP KMS 2.3.0

What's new

The complete list of changes since 2.2.0 can be found here.

• Added conventional asymmetric signing capabilities
• Added post-quantum asymmetric signing capabilities
• Added support for MAC computation and verification.
• Removed Bazel config. With this change Bazel users will no longer be able to import tink-go-gcpkms as a pure Bazel dependency (bazel_dep) in their MODULE.bazel file. However, Bazel users can continue importing tink-go using bazel-gazelle. If this causes any issues in your project, please file an issue.
• Upgraded direct deps:
  • github.com/tink-crypto/tink-go/v2 to v2.4.0
  • google.golang.org/api to v0.248.0
  • cloud.google.com/go/kms to v1.22.0
  • google.golang.org/grpc to v1.75.0
  • google.golang.org/protobuf to v1.36.6
  • google.golang.org/genproto to v0.0.0-20250826171959-ef028d996bc1
• Set minimum supported Go version to 1.24.0

Future work

To see what we're working towards, check our project roadmap.

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go-gcpkms/v2@v2.3.0

Bazel

workspace(name = "example")
load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
Release X.25.2 from 2024-01-09.
</tr></table>

... (truncated)

Commits

• acfbf86 Bump version to 2.3.0
• 7ab0a99 Implement verifyMac.
• 6b5a8e1 Implement ComputeMac and add unit Tests.
• 57d0063 Move mock KMS setup to a separate test file.
• 45d555e Add skeleton for Mac.
• be791f7 Ensure we use always request raw bytes format for PQC algorithms.
• 056b322 Merge pull request #14 from winor30:chore/client-close
• 2b0b67a Merge pull request #16 from winor30:fix/gcpkms-aead-pointer
• dd3f87b Revert "Refactor GCP KMS AEAD package import order"
• 8a82927 Add the option of making prereleases.
• Additional commits viewable in compare view

Updates github.com/tink-crypto/tink-go/v2 from 2.6.0 to 2.7.0

Release notes

Sourced from github.com/tink-crypto/tink-go/v2's releases.

v2.7.0

This is Tink Go 2.7.0.

What's new

The complete list of changes since 2.7.0 can be found here.

• Added ML-DSA-44 support to signatures.
• Added test-only dependency on github.com/c2sp/wycheproof.
• Removed runtime download of Wycheproof test vectors.
• Removed internal test utilities from the testutil package:
  • PopulateSuite()
  • WycheproofSuite
  • WycheproofGroup
  • WycheproofCase
• Added X-Wing and ML-KEM support to HPKE.
• Added more SLH-DSA parameter sets.
• ECDSA verification primitives no longer accept IEEE P1363 encoded signatures (IEEE Std 1363-2000) of a larger size than what's expected by the used curve. This is to reject signatures with extra 0...0 prefix, e.g., 0...0S||0....0R.

Future work

To see what we're working towards, check our project roadmap.

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go/v2@2.7.0

Commits

• 25ed99c Bump Tink Go version to 2.7.0.
• 7da7ef8 Fix error message
• 294502d Rename MAC test functions from "Decrypt" to "Verify".
• 8b8a800 Consistently error on nil or empty keyset handles in factory functions.
• 01e7e2c Fix error message for legacy compatibility.
• d6d305e Return error for empty keyset handle in NewWithConfig
• 95b367a Refactor StreamingAEAD factory to use factoryutil.
• 53c270f Remove the internal primitiveset package.
• 896d4f9 Remove keyset.Primitives
• af6875f Refactor signature factories to use factoryutil.
• Additional commits viewable in compare view

Updates github.com/sigstore/rekor-tiles/v2 from 2.2.1 to 2.3.0

Release notes

Sourced from github.com/sigstore/rekor-tiles/v2's releases.

v2.3.0

What's Changed

v2.3.0 drops support for the DSSE entry type. All Sigstore SDKs will now upload DSSEs as hashedrekord entries, to support uploading large DSSEs, such as signed SBOMs, for the public instance. We strongly recommend not relying on the previous DSSE type in any way, as going forward, there will only be one supported entry type.

Breaking Changes

• Drop DSSE support in sigstore/rekor-tiles#744

Library Features

• Add ToEntryHash and VerifyLogEntryWithHash in sigstore/rekor-tiles#787

Fixes

• don't return full panic in user-facing error message in sigstore/rekor-tiles#707
• ensure error can be Unwrapped in sigstore/rekor-tiles#710
• defensive fix if err is wrapped in sigstore/rekor-tiles#708
• Limit client response reads, set default timeouts, and validate digest sizes in sigstore/rekor-tiles#806

Full Changelog: sigstore/rekor-tiles@v2.2.1...v2.3.0

Commits

• fa390b1 Drop DSSE support (#744)
• cc556d2 Bump zizmorcore/zizmor from 1.19.0 to 1.25.2 (#799)
• 89af73c Bump golangci/golangci-lint from v2.7.2 to v2.12.2 (#796)
• 4ba10fe Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.102.2 (#822)
• 057d8d8 Bump google.golang.org/api from 0.280.0 to 0.283.0 (#820)
• 73c5d83 Bump go.opentelemetry.io/otel/exporters/prometheus from 0.65.0 to 0.66.0 (#819)
• 1acc2a2 Bump the go-patch-updates group across 1 directory with 4 updates (#818)
• 67a318a Bump github/codeql-action from 4.35.5 to 4.36.1 (#817)
• 76fd5d6 workflows: Bump codecov to fix CI (#823)
• a88619d Bump the docker-compose-patch-updates group across 2 directories with 1 updat...
• Additional commits viewable in compare view

Updates github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.3.0

Release notes

Sourced from github.com/tink-crypto/tink-go-gcpkms/v2's releases.

Tink Go Google Cloud KMS Extension v2.3.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Go GCP KMS 2.3.0

What's new

The complete list of changes since 2.2.0 can be found here.

• Added conventional asymmetric signing capabilities
• Added post-quantum asymmetric signing capabilities
• Added support for MAC computation and verification.
• Removed Bazel config. With this change Bazel users will no longer be able to import tink-go-gcpkms as a pure Bazel dependency (bazel_dep) in their MODULE.bazel file. However, Bazel users can continue importing tink-go using bazel-gazelle. If this causes any issues in your project, please file an issue.
• Upgraded direct deps:
  • github.com/tink-crypto/tink-go/v2 to v2.4.0
  • google.golang.org/api to v0.248.0
  • cloud.google.com/go/kms to v1.22.0
  • google.golang.org/grpc to v1.75.0
  • google.golang.org/protobuf to v1.36.6
  • google.golang.org/genproto to v0.0.0-20250826171959-ef028d996bc1
• Set minimum supported Go version to 1.24.0

Future work

To see what we're working towards, check our project roadmap.

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go-gcpkms/v2@v2.3.0

Bazel

workspace(name = "example")
load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
Release X.25.2 from 2024-01-09.
</tr></table>

... (truncated)

Commits

• acfbf86 Bump version to 2.3.0
• 7ab0a99 Implement verifyMac.
• 6b5a8e1 Implement ComputeMac and add unit Tests.
• 57d0063 Move mock KMS setup to a separate test file.
• 45d555e Add skeleton for Mac.
• be791f7 Ensure we use always request raw bytes format for PQC algorithms.
• 056b322 Merge pull request #14 from winor30:chore/client-close
• 2b0b67a Merge pull request #16 from winor30:fix/gcpkms-aead-pointer
• dd3f87b Revert "Refactor GCP KMS AEAD package import order"
• 8a82927 Add the option of making prereleases.
• Additional commits viewable in compare view

Updates github.com/tink-crypto/tink-go/v2 from 2.6.0 to 2.7.0

Release notes

Sourced from github.com/tink-crypto/tink-go/v2's releases.

v2.7.0

This is Tink Go 2.7.0.

What's new

The complete list of changes since 2.7.0 can be found here.

• Added ML-DSA-44 support to signatures.
• Added test-only dependency on github.com/c2sp/wycheproof.
• Removed runtime download of Wycheproof test vectors.
• Removed internal test utilities from the testutil package:
  • PopulateSuite()
  • WycheproofSuite
  • WycheproofGroup
  • WycheproofCase
• Added X-Wing and ML-KEM support to HPKE.
• Added more SLH-DSA parameter sets.
• ECDSA verification primitives no longer accept IEEE P1363 encoded signatures (IEEE Std 1363-2000) of a larger size than what's expected by the used curve. This is to reject signatures with extra 0...0 prefix, e.g., 0...0S||0....0R.

Future work

To see what we're working towards, check our project roadmap.

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go/v2@2.7.0

Commits

• 25ed99c Bump Tink Go version to 2.7.0.
• 7da7ef8 Fix error message
• 294502d Rename MAC test functions from "Decrypt" to "Verify".
• 8b8a800 Consistently error on nil or empty keyset handles in factory functions.
• 01e7e2c Fix error message for legacy compatibility.
• d6d305e Return error for empty keyset handle in NewWithConfig
• 95b367a Refactor StreamingAEAD factory to use factoryutil.
• 53c270f Remove the internal primitiveset package.
• 896d4f9 Remove keyset.Primitives
• af6875f Refactor signature factories to use factoryutil.
• Additional commits viewable in compare view

Updates github.com/sigstore/rekor-tiles/v2 from 2.2.1 to 2.3.0

Release notes

Sourced from github.com/sigstore/rekor-tiles/v2's releases.

v2.3.0

What's Changed

v2.3.0 drops support for the DSSE entry type. All Sigstore SDKs will now upload DSSEs as hashedrekord entries, to support uploading large DSSEs, such as signed SBOMs, for the public instance. We strongly recommend not relying on the previous DSSE type in any way, as going forward, there will only be one supported entry type.

Breaking Changes

• Drop DSSE support in sigstore/rekor-tiles#744

Library Features

• Add ToEntryHash and VerifyLogEntryWithHash in sigstore/rekor-tiles#787

Fixes

• don't return full panic in user-facing error message in sigstore/rekor-tiles#707
• ensure error can be Unwrapped in sigstore/rekor-tiles#710
• defensive fix if err is wrapped in sigstore/rekor-tiles#708
• Limit client response reads, set default timeouts, and validate digest sizes in sigstore/rekor-tiles#806

Full Changelog: sigstore/rekor-tiles@v2.2.1...v2.3.0

Commits

• fa390b1 Drop DSSE support (#744)
• cc556d2 Bump zizmorcore/zizmor from 1.19.0 to 1.25.2 (#799)
• 89af73c Bump golangci/golangci-lint from v2.7.2 to v2.12.2 (#796)
• 4ba10fe Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.102.2 (#822)
• 057d8d8 Bump google.golang.org/api from 0.280.0 to 0.283.0 (#820)
• 73c5d83 Bump go.opentelemetry.io/otel/exporters/prometheus from 0.65.0 to 0.66.0 (#819)
• 1acc2a2 Bump the go-patch-updates group across 1 directory with 4 updates (#818)
• 67a318a Bump github/codeql-action from 4.35.5 to 4.36.1 (#817)
• 76fd5d6 workflows: Bump codecov to fix CI (#823)
• a88619d Bump the docker-compose-patch-updates group across 2 directories with 1 updat...
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.3 to 0.36.2

Commits

• 877f535 Update dependencies to v0.36.2 tag
• f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
• a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
• df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
• 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
• 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
• 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
• ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
• 4a9c878 Add ResourcePoolStatusRequest API types and generated code
• Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.10.5 to 1.10.8

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.10.8

What's Changed

• Support standard PKCS#8 encrypted private key decryption in sigstore/sigstore#2333

Full Changelog: sigstore/sigstore@v1.10.7...v1.10.8

v1.10.7

What's Changed

• add functional options to DSSE to improve memory usage, validation in sigstore/sigstore#2326
• Extend PEM private key unmarshalling to support legacy format in sigstore/sigstore#2332

Full Changelog: sigstore/sigstore@v1.10.6...v1.10.7

v1.10.6

What's Changed

• fix: remove leftover Go template syntax from success page by @​imjasonh in sigstore/sigstore#2324

Full Changelog: sigstore/sigstore@v1.10.5...v1.10.6

Description has been truncated