Lock file maintenance vulnfeeds (#2304)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |  |  |  |  |
|
[cloud.google.com/go/logging](https://togithub.com/googleapis/google-cloud-go)
| require | minor | `v1.8.1` -> `v1.10.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2flogging/v1.10.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/cloud.google.com%2fgo%2flogging/v1.10.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/cloud.google.com%2fgo%2flogging/v1.8.1/v1.10.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2flogging/v1.8.1/v1.10.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[cloud.google.com/go/secretmanager](https://togithub.com/googleapis/google-cloud-go)
| require | minor | `v1.11.4` -> `v1.13.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fsecretmanager/v1.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/cloud.google.com%2fgo%2fsecretmanager/v1.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/cloud.google.com%2fgo%2fsecretmanager/v1.11.4/v1.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fsecretmanager/v1.11.4/v1.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[github.com/atombender/go-jsonschema](https://togithub.com/atombender/go-jsonschema)
| require | minor | `v0.14.1` -> `v0.16.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fatombender%2fgo-jsonschema/v0.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fatombender%2fgo-jsonschema/v0.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fatombender%2fgo-jsonschema/v0.14.1/v0.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fatombender%2fgo-jsonschema/v0.14.1/v0.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [github.com/go-git/go-git/v5](https://togithub.com/go-git/go-git) |
require | minor | `v5.11.0` -> `v5.12.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgo-git%2fgo-git%2fv5/v5.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgo-git%2fgo-git%2fv5/v5.11.0/v5.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.11.0/v5.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[github.com/google/osv-scanner](https://togithub.com/google/osv-scanner)
| require | minor | `v1.4.3` -> `v1.7.4` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fosv-scanner/v1.7.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgoogle%2fosv-scanner/v1.7.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgoogle%2fosv-scanner/v1.4.3/v1.7.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fosv-scanner/v1.4.3/v1.7.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| golang | stage | digest | `9d8429e` -> `9bdd569` |  |  |  |  |
| golang.org/x/exp | require | digest | `6522937` -> `fc45aab` |
[![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fexp/v0.0.0-20240604190554-fc45aab8b7f8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/golang.org%2fx%2fexp/v0.0.0-20240604190554-fc45aab8b7f8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/golang.org%2fx%2fexp/v0.0.0-20231127185646-65229373498e/v0.0.0-20240604190554-fc45aab8b7f8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fexp/v0.0.0-20231127185646-65229373498e/v0.0.0-20240604190554-fc45aab8b7f8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>atombender/go-jsonschema
(github.com/atombender/go-jsonschema)</summary>

###
[`v0.16.0`](https://togithub.com/omissis/go-jsonschema/releases/tag/v0.16.0)

[Compare
Source](https://togithub.com/atombender/go-jsonschema/compare/v0.15.0...v0.16.0)

This release introduces several new improvements:

-   Improve support for non-case-sensitive languages
-   Make generated go more stable, and solve annoying big diffs
-   Fix  generated code for non-nullable types with two options
-   Removes nil check for `required` properties
-   Add support for additionalProperties when other fields exist

#### What's Changed

- Enhance splitIdentifierByCaseAndSeparators to support
non-case-sensitive languages by
[@&#8203;zrma](https://togithub.com/zrma) in
[https://github.com/omissis/go-jsonschema/pull/170](https://togithub.com/omissis/go-jsonschema/pull/170)
- Stable output: Add some more names to anonymous Method classes by
[@&#8203;RobQuistNL](https://togithub.com/RobQuistNL) in
[https://github.com/omissis/go-jsonschema/pull/169](https://togithub.com/omissis/go-jsonschema/pull/169)
- Fix non-nullable type with two options by
[@&#8203;jagregory](https://togithub.com/jagregory) in
[https://github.com/omissis/go-jsonschema/pull/205](https://togithub.com/omissis/go-jsonschema/pull/205)
- Removes nil check for `required` properties by
[@&#8203;Henkoglobin](https://togithub.com/Henkoglobin) in
[https://github.com/omissis/go-jsonschema/pull/215](https://togithub.com/omissis/go-jsonschema/pull/215)
- Add support for additionalProperties when other fields exist by
[@&#8203;codeboten](https://togithub.com/codeboten) and
[@&#8203;omissis](https://togithub.com/omissis) in
[https://github.com/omissis/go-jsonschema/pull/218](https://togithub.com/omissis/go-jsonschema/pull/218)
- Update go and all deps by
[@&#8203;omissis](https://togithub.com/omissis) in
[https://github.com/omissis/go-jsonschema/pull/217](https://togithub.com/omissis/go-jsonschema/pull/217)
-   Several [@&#8203;renovate](https://togithub.com/renovate) PRs
- fix(deps): update golang.org/x/exp digest to
[`1b97071`](https://togithub.com/atombender/go-jsonschema/commit/1b97071)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/190](https://togithub.com/omissis/go-jsonschema/pull/190)
- fix(deps): update module github.com/goccy/go-yaml to v1.11.3 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/191](https://togithub.com/omissis/go-jsonschema/pull/191)
- fix(deps): update golang.org/x/exp digest to
[`2c58cdc`](https://togithub.com/atombender/go-jsonschema/commit/2c58cdc)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/193](https://togithub.com/omissis/go-jsonschema/pull/193)
- chore(deps): update golang docker tag to v1.22.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/195](https://togithub.com/omissis/go-jsonschema/pull/195)
- chore(deps): update dependency golangci-lint to v1.56.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/196](https://togithub.com/omissis/go-jsonschema/pull/196)
- chore(deps): update dependency golangci-lint to v1.56.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/197](https://togithub.com/omissis/go-jsonschema/pull/197)
- chore(deps): update dependency shfmt to v3.8.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/198](https://togithub.com/omissis/go-jsonschema/pull/198)
- fix(deps): update golang.org/x/exp digest to
[`ec58324`](https://togithub.com/atombender/go-jsonschema/commit/ec58324)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/199](https://togithub.com/omissis/go-jsonschema/pull/199)
- chore(deps): update dependency golangci-lint to v1.56.2 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/200](https://togithub.com/omissis/go-jsonschema/pull/200)
- fix(deps): update golang.org/x/exp digest to
[`814bf88`](https://togithub.com/atombender/go-jsonschema/commit/814bf88)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/201](https://togithub.com/omissis/go-jsonschema/pull/201)
- chore(deps): update golang docker tag to v1.22.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/202](https://togithub.com/omissis/go-jsonschema/pull/202)
- chore(deps): update dependency shellcheck to v0.10.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/203](https://togithub.com/omissis/go-jsonschema/pull/203)
- chore(deps): update codecov/codecov-action action to v4 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/192](https://togithub.com/omissis/go-jsonschema/pull/192)
- fix(deps): update golang.org/x/exp digest to
[`c7f7c64`](https://togithub.com/atombender/go-jsonschema/commit/c7f7c64)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/206](https://togithub.com/omissis/go-jsonschema/pull/206)
- fix(deps): update golang.org/x/exp digest to
[`a85f2c6`](https://togithub.com/atombender/go-jsonschema/commit/a85f2c6)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/207](https://togithub.com/omissis/go-jsonschema/pull/207)
- chore(deps): update dependency golangci-lint to v1.57.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/208](https://togithub.com/omissis/go-jsonschema/pull/208)
- chore(deps): update dependency golangci-lint to v1.57.1 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/209](https://togithub.com/omissis/go-jsonschema/pull/209)
- fix(deps): update golang.org/x/exp digest to
[`a685a6e`](https://togithub.com/atombender/go-jsonschema/commit/a685a6e)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/210](https://togithub.com/omissis/go-jsonschema/pull/210)
- chore(deps): update dependency golangci-lint to v1.57.2 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/211](https://togithub.com/omissis/go-jsonschema/pull/211)
- chore(deps): update golang docker tag to v1.22.2 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/212](https://togithub.com/omissis/go-jsonschema/pull/212)
- fix(deps): update golang.org/x/exp digest to
[`c0f41cb`](https://togithub.com/atombender/go-jsonschema/commit/c0f41cb)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/213](https://togithub.com/omissis/go-jsonschema/pull/213)
- fix(deps): update golang.org/x/exp digest to
[`93d18d7`](https://togithub.com/atombender/go-jsonschema/commit/93d18d7)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/214](https://togithub.com/omissis/go-jsonschema/pull/214)
- fix(deps): update golang.org/x/exp digest to
[`fe59bbe`](https://togithub.com/atombender/go-jsonschema/commit/fe59bbe)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/216](https://togithub.com/omissis/go-jsonschema/pull/216)

#### New Contributors

- [@&#8203;zrma](https://togithub.com/zrma) made their first
contribution in
[https://github.com/omissis/go-jsonschema/pull/170](https://togithub.com/omissis/go-jsonschema/pull/170)
- [@&#8203;RobQuistNL](https://togithub.com/RobQuistNL) made their first
contribution in
[https://github.com/omissis/go-jsonschema/pull/169](https://togithub.com/omissis/go-jsonschema/pull/169)
- [@&#8203;jagregory](https://togithub.com/jagregory) made their first
contribution in
[https://github.com/omissis/go-jsonschema/pull/205](https://togithub.com/omissis/go-jsonschema/pull/205)
- [@&#8203;Henkoglobin](https://togithub.com/Henkoglobin) made their
first contribution in
[https://github.com/omissis/go-jsonschema/pull/215](https://togithub.com/omissis/go-jsonschema/pull/215)
- [@&#8203;codeboten](https://togithub.com/codeboten) made their first
contribution in
[https://github.com/omissis/go-jsonschema/pull/218](https://togithub.com/omissis/go-jsonschema/pull/218)
(replaces
[https://github.com/omissis/go-jsonschema/pull/189](https://togithub.com/omissis/go-jsonschema/pull/189))

**Full Changelog**:
omissis/go-jsonschema@v0.15.0...v0.16.0

###
[`v0.15.0`](https://togithub.com/omissis/go-jsonschema/releases/tag/v0.15.0)

[Compare
Source](https://togithub.com/atombender/go-jsonschema/compare/v0.14.1...v0.15.0)

This release introduces one new feature and a fix:

-   support for `file://` schema in references
-   support for yaml file references

#### What's Changed

- feat: add support for "file://" schema in $refs by
[@&#8203;omissis](https://togithub.com/omissis) in
[https://github.com/omissis/go-jsonschema/pull/147](https://togithub.com/omissis/go-jsonschema/pull/147)
- fix: support for yaml file references by
[@&#8203;johanneswuerbach](https://togithub.com/johanneswuerbach) in
[https://github.com/omissis/go-jsonschema/pull/179](https://togithub.com/omissis/go-jsonschema/pull/179)
- chore: split generate.go file by
[@&#8203;AlbertoBarba](https://togithub.com/AlbertoBarba) in
[https://github.com/omissis/go-jsonschema/pull/153](https://togithub.com/omissis/go-jsonschema/pull/153)
- chore(deps): update dependency golangci-lint to v1.55.2 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/162](https://togithub.com/omissis/go-jsonschema/pull/162)
- chore(deps): update golang docker tag to v1.21.4 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/165](https://togithub.com/omissis/go-jsonschema/pull/165)
- chore(deps): update golang docker tag to v1.21.5 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/174](https://togithub.com/omissis/go-jsonschema/pull/174)
- chore(deps): update actions/setup-go action to v5 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/175](https://togithub.com/omissis/go-jsonschema/pull/175)
- chore(deps): update golang docker tag to v1.21.6 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/184](https://togithub.com/omissis/go-jsonschema/pull/184)
- fix(deps): update module github.com/spf13/cobra to v1.8.0 by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/163](https://togithub.com/omissis/go-jsonschema/pull/163)
- fix(deps): update golang.org/x/exp digest to
[`2478ac8`](https://togithub.com/atombender/go-jsonschema/commit/2478ac8)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/166](https://togithub.com/omissis/go-jsonschema/pull/166)
- fix(deps): update golang.org/x/exp digest to
[`9a3e603`](https://togithub.com/atombender/go-jsonschema/commit/9a3e603)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/168](https://togithub.com/omissis/go-jsonschema/pull/168)
- fix(deps): update golang.org/x/exp digest to
[`6522937`](https://togithub.com/atombender/go-jsonschema/commit/6522937)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/172](https://togithub.com/omissis/go-jsonschema/pull/172)
- fix(deps): update golang.org/x/exp digest to
[`f3f8817`](https://togithub.com/atombender/go-jsonschema/commit/f3f8817)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/176](https://togithub.com/omissis/go-jsonschema/pull/176)
- fix(deps): update golang.org/x/exp digest to
[`aacd6d4`](https://togithub.com/atombender/go-jsonschema/commit/aacd6d4)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/178](https://togithub.com/omissis/go-jsonschema/pull/178)
- fix(deps): update golang.org/x/exp digest to
[`dc181d7`](https://togithub.com/atombender/go-jsonschema/commit/dc181d7)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/180](https://togithub.com/omissis/go-jsonschema/pull/180)
- fix(deps): update golang.org/x/exp digest to
[`02704c9`](https://togithub.com/atombender/go-jsonschema/commit/02704c9)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/181](https://togithub.com/omissis/go-jsonschema/pull/181)
- fix(deps): update golang.org/x/exp digest to
[`be819d1`](https://togithub.com/atombender/go-jsonschema/commit/be819d1)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/182](https://togithub.com/omissis/go-jsonschema/pull/182)
- fix(deps): update golang.org/x/exp digest to
[`0dcbfd6`](https://togithub.com/atombender/go-jsonschema/commit/0dcbfd6)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/185](https://togithub.com/omissis/go-jsonschema/pull/185)
- fix(deps): update golang.org/x/exp digest to
[`db7319d`](https://togithub.com/atombender/go-jsonschema/commit/db7319d)
by [@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/omissis/go-jsonschema/pull/186](https://togithub.com/omissis/go-jsonschema/pull/186)

#### New Contributors

- [@&#8203;johanneswuerbach](https://togithub.com/johanneswuerbach) made
their first contribution in
[https://github.com/omissis/go-jsonschema/pull/179](https://togithub.com/omissis/go-jsonschema/pull/179)

**Full Changelog**:
omissis/go-jsonschema@v0.14.1...v0.15.0

</details>

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

### [`v5.12.0`](https://togithub.com/go-git/go-git/releases/tag/v5.12.0)

[Compare
Source](https://togithub.com/go-git/go-git/compare/v5.11.0...v5.12.0)

#### What's Changed

- git: Worktree.AddWithOptions: add skipStatus option when providing a
specific path by
[@&#8203;moranCohen26](https://togithub.com/moranCohen26) in
[https://github.com/go-git/go-git/pull/994](https://togithub.com/go-git/go-git/pull/994)
- git: Signer: fix usage of crypto.Signer interface by
[@&#8203;wlynch](https://togithub.com/wlynch) in
[https://github.com/go-git/go-git/pull/1029](https://togithub.com/go-git/go-git/pull/1029)
- git: Remote, fetch, adds the prune option. by
[@&#8203;juliens](https://togithub.com/juliens) in
[https://github.com/go-git/go-git/pull/366](https://togithub.com/go-git/go-git/pull/366)
- git: Add crypto.Signer option to CommitOptions. by
[@&#8203;wlynch](https://togithub.com/wlynch) in
[https://github.com/go-git/go-git/pull/996](https://togithub.com/go-git/go-git/pull/996)
- git: Worktree checkout tag hash id
([#&#8203;959](https://togithub.com/go-git/go-git/issues/959)) by
[@&#8203;aymanbagabas](https://togithub.com/aymanbagabas) in
[https://github.com/go-git/go-git/pull/966](https://togithub.com/go-git/go-git/pull/966)
- git: Worktree, Don't panic on empty or root path when checking if it
is valid by [@&#8203;tim775](https://togithub.com/tim775) in
[https://github.com/go-git/go-git/pull/1042](https://togithub.com/go-git/go-git/pull/1042)
- git: Add commit validation for Reset by
[@&#8203;pjbgf](https://togithub.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1048](https://togithub.com/go-git/go-git/pull/1048)
- git: worktree_commit, Fix amend commit to apply changes. Fixes
[#&#8203;1024](https://togithub.com/go-git/go-git/issues/1024) by
[@&#8203;onee-only](https://togithub.com/onee-only) in
[https://github.com/go-git/go-git/pull/1045](https://togithub.com/go-git/go-git/pull/1045)
- git: Implement Merge function with initial `FastForwardMerge` support
by [@&#8203;pjbgf](https://togithub.com/pjbgf) in
[https://github.com/go-git/go-git/pull/1044](https://togithub.com/go-git/go-git/pull/1044)
- plumbing: object, Make first commit visible on logs filtered with
filename. Fixes
[#&#8203;191](https://togithub.com/go-git/go-git/issues/191) by
[@&#8203;onee-only](https://togithub.com/onee-only) in
[https://github.com/go-git/go-git/pull/1036](https://togithub.com/go-git/go-git/pull/1036)
- plumbing: no panic in printStats function. Fixes
[#&#8203;177](https://togithub.com/go-git/go-git/issues/177) by
[@&#8203;nodivbyzero](https://togithub.com/nodivbyzero) in
[https://github.com/go-git/go-git/pull/971](https://togithub.com/go-git/go-git/pull/971)
- plumbing: object, Optimize logging with file. by
[@&#8203;onee-only](https://togithub.com/onee-only) in
[https://github.com/go-git/go-git/pull/1046](https://togithub.com/go-git/go-git/pull/1046)
- plumbing: object, check legitimacy in (\*Tree).Encode by
[@&#8203;niukuo](https://togithub.com/niukuo) in
[https://github.com/go-git/go-git/pull/967](https://togithub.com/go-git/go-git/pull/967)
- plumbing: format/gitattributes, close file in ReadAttributesFile by
[@&#8203;prskr](https://togithub.com/prskr) in
[https://github.com/go-git/go-git/pull/1018](https://togithub.com/go-git/go-git/pull/1018)
- plumbing: check setAuth error. Fixes
[#&#8203;185](https://togithub.com/go-git/go-git/issues/185) by
[@&#8203;nodivbyzero](https://togithub.com/nodivbyzero) in
[https://github.com/go-git/go-git/pull/969](https://togithub.com/go-git/go-git/pull/969)
- plumbing: object, fix variable defaultUtf8CommitMessageEncoding name
spell error by [@&#8203;Jerry-yz](https://togithub.com/Jerry-yz) in
[https://github.com/go-git/go-git/pull/987](https://togithub.com/go-git/go-git/pull/987)
- utils: merkletrie, calculate filesystem node's hash lazily. by
[@&#8203;candid82](https://togithub.com/candid82) in
[https://github.com/go-git/go-git/pull/825](https://togithub.com/go-git/go-git/pull/825)
- utils: update comment in node.go's Hash() by
[@&#8203;codablock](https://togithub.com/codablock) in
[https://github.com/go-git/go-git/pull/992](https://togithub.com/go-git/go-git/pull/992)
- \_example: fix 404 link and added ssh-agent clone link by
[@&#8203;grinish21](https://togithub.com/grinish21) in
[https://github.com/go-git/go-git/pull/1022](https://togithub.com/go-git/go-git/pull/1022)
- \_example: checkout-branch example by
[@&#8203;dlambda](https://togithub.com/dlambda) in
[https://github.com/go-git/go-git/pull/446](https://togithub.com/go-git/go-git/pull/446)
- \_example: example for git clone using ssh-agent by
[@&#8203;pjbgf](https://togithub.com/pjbgf) in
[https://github.com/go-git/go-git/pull/998](https://togithub.com/go-git/go-git/pull/998)

#### New Contributors

- [@&#8203;candid82](https://togithub.com/candid82) made their first
contribution in
[https://github.com/go-git/go-git/pull/825](https://togithub.com/go-git/go-git/pull/825)
- [@&#8203;codablock](https://togithub.com/codablock) made their first
contribution in
[https://github.com/go-git/go-git/pull/992](https://togithub.com/go-git/go-git/pull/992)
- [@&#8203;Jerry-yz](https://togithub.com/Jerry-yz) made their first
contribution in
[https://github.com/go-git/go-git/pull/987](https://togithub.com/go-git/go-git/pull/987)
- [@&#8203;wlynch](https://togithub.com/wlynch) made their first
contribution in
[https://github.com/go-git/go-git/pull/996](https://togithub.com/go-git/go-git/pull/996)
- [@&#8203;moranCohen26](https://togithub.com/moranCohen26) made their
first contribution in
[https://github.com/go-git/go-git/pull/994](https://togithub.com/go-git/go-git/pull/994)
- [@&#8203;grinish21](https://togithub.com/grinish21) made their first
contribution in
[https://github.com/go-git/go-git/pull/1022](https://togithub.com/go-git/go-git/pull/1022)
- [@&#8203;prskr](https://togithub.com/prskr) made their first
contribution in
[https://github.com/go-git/go-git/pull/1018](https://togithub.com/go-git/go-git/pull/1018)
- [@&#8203;dlambda](https://togithub.com/dlambda) made their first
contribution in
[https://github.com/go-git/go-git/pull/446](https://togithub.com/go-git/go-git/pull/446)
- [@&#8203;juliens](https://togithub.com/juliens) made their first
contribution in
[https://github.com/go-git/go-git/pull/366](https://togithub.com/go-git/go-git/pull/366)
- [@&#8203;onee-only](https://togithub.com/onee-only) made their first
contribution in
[https://github.com/go-git/go-git/pull/1036](https://togithub.com/go-git/go-git/pull/1036)
- [@&#8203;tim775](https://togithub.com/tim775) made their first
contribution in
[https://github.com/go-git/go-git/pull/1042](https://togithub.com/go-git/go-git/pull/1042)
- [@&#8203;niukuo](https://togithub.com/niukuo) made their first
contribution in
[https://github.com/go-git/go-git/pull/967](https://togithub.com/go-git/go-git/pull/967)
- [@&#8203;avoidalone](https://togithub.com/avoidalone) made their first
contribution in
[https://github.com/go-git/go-git/pull/1047](https://togithub.com/go-git/go-git/pull/1047)

**Full Changelog**:
go-git/go-git@v5.11.0...v5.12.0

</details>

<details>
<summary>google/osv-scanner (github.com/google/osv-scanner)</summary>

###
[`v1.7.4`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v174)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.7.3...v1.7.4)

##### Features:

- [Feature
#&#8203;943](https://togithub.com/google/osv-scanner/pull/943) Support
scanning gradle/verification-metadata.xml files.

##### Misc:

- [Bug #&#8203;968](https://togithub.com/google/osv-scanner/issues/968)
Hide unimportant Debian vulnerabilities to reduce noise.

###
[`v1.7.3`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v173)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.7.2...v1.7.3)

##### Features:

- [Feature
#&#8203;934](https://togithub.com/google/osv-scanner/pull/934) add
support for PNPM v9 lockfiles.

##### Fixes:

- [Bug #&#8203;938](https://togithub.com/google/osv-scanner/issues/938)
Ensure the sarif output has a stable order.
- [Bug #&#8203;922](https://togithub.com/google/osv-scanner/issues/922)
Support filtering on alias IDs in Guided Remediation.

###
[`v1.7.2`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v172)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.7.1...v1.7.2)

##### Fixes:

- [Bug #&#8203;899](https://togithub.com/google/osv-scanner/issues/899)
Guided Remediation: Parse paths in npmrc auth fields correctly.
- [Bug #&#8203;908](https://togithub.com/google/osv-scanner/issues/908)
Fix rust call analysis by explicitly disabling stripping of debug info.
- [Bug #&#8203;914](https://togithub.com/google/osv-scanner/issues/914)
Fix regression for go call analysis introduced in 1.7.0.

###
[`v1.7.1`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v171)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.7.0...v1.7.1)

(There is no Github release for this version)

##### Fixes

- [Bug #&#8203;856](https://togithub.com/google/osv-scanner/issues/856)
Add retry logic to make calls to OSV.dev API more resilient. This
combined with changes in OSV.dev's API should result in much less
timeout errors.

##### API Features

- [Feature
#&#8203;781](https://togithub.com/google/osv-scanner/pull/781)
    add `MakeVersionRequestsWithContext()`
- [Feature
#&#8203;857](https://togithub.com/google/osv-scanner/pull/857)
API and networking related errors now has their own error and exit code
(Exit Code 129)

###
[`v1.7.0`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v170)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.6.2...v1.7.0)

##### Features

- [Feature
#&#8203;352](https://togithub.com/google/osv-scanner/issues/352) Guided
Remediation
Introducing our new experimental guided remediation feature on
`osv-scanner fix` subcommand.
See our
[docs](https://google.github.io/osv-scanner/experimental/guided-remediation/)
for detailed usage instructions.

- [Feature
#&#8203;805](https://togithub.com/google/osv-scanner/pull/805)
    Include CVSS MaxSeverity in JSON output.

##### Fixes

-   [Bug #&#8203;818](https://togithub.com/google/osv-scanner/pull/818)
    Align GoVulncheck Go version with go.mod.

-   [Bug #&#8203;797](https://togithub.com/google/osv-scanner/pull/797)
    Don't traverse gitignored dirs for gitignore files.

##### Miscellaneous

-   [#&#8203;831](https://togithub.com/google/osv-scanner/pull/831)
    Remove version number from the release binary name.

###
[`v1.6.2`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v162)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.6.1...v1.6.2)

##### Features

- [Feature
#&#8203;694](https://togithub.com/google/osv-scanner/pull/694)
Add subcommands! OSV-Scanner now has subcommands! The base command has
been moved to `scan` (currently the only commands is `scan`).
By default if you do not pass in a command, `scan` will be used, so CLI
remains backwards compatible.

This is a building block to adding the guided remediation feature. See
[issue #&#8203;352](https://togithub.com/google/osv-scanner/issues/352)
    for more details!

- [Feature
#&#8203;776](https://togithub.com/google/osv-scanner/pull/776)
    Add pdm lockfile support.

##### API Features

- [Feature
#&#8203;754](https://togithub.com/google/osv-scanner/pull/754)
    Add dependency groups to flattened vulnerabilities output.

###
[`v1.6.1`](https://togithub.com/google/osv-scanner/releases/tag/v1.6.1)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.6.0...v1.6.1)

### v1.6.0/v1.6.1:

##### Features

- [Feature
#&#8203;694](https://togithub.com/google/osv-scanner/pull/694) Add
support for NuGet lock files version 2.

- [Feature
#&#8203;655](https://togithub.com/google/osv-scanner/pull/655) Scan and
report dependency groups (e.g. "dev dependencies") for vulnerabilities.

- [Feature
#&#8203;702](https://togithub.com/google/osv-scanner/pull/702) Created
an option to skip/disable upload to code scanning.

- [Feature
#&#8203;732](https://togithub.com/google/osv-scanner/pull/732) Add
option to not fail on vulnerability being found for GitHub Actions.

- [Feature
#&#8203;729](https://togithub.com/google/osv-scanner/pull/729) Verify
the spdx licenses passed in to the license allowlist.

##### Fixes

- [Bug #&#8203;736](https://togithub.com/google/osv-scanner/pull/736)
Show ecosystem and version even if git is shown if the info exists.

- [Bug #&#8203;703](https://togithub.com/google/osv-scanner/pull/703)
Return an error if both license scanning and local/offline scanning is
enabled simultaneously.

- [Bug #&#8203;718](https://togithub.com/google/osv-scanner/pull/718)
Fixed parsing of SBOMs generated by the latest CycloneDX.

- [Bug #&#8203;704](https://togithub.com/google/osv-scanner/pull/704)
Get go stdlib version from go.mod.

##### API Features

- [Feature
#&#8203;727](https://togithub.com/google/osv-scanner/pull/727) Changes
to `Reporter` methods to add verbosity levels and to deprecate
functions.

#### New Contributors

- [@&#8203;geekNero](https://togithub.com/geekNero) made their first
contribution in
[https://github.com/google/osv-scanner/pull/718](https://togithub.com/google/osv-scanner/pull/718)

**Full Changelog**:
google/osv-scanner@v1.5.0...v1.6.0-alpha3

###
[`v1.6.0`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v160)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.5.0...v1.6.0)

##### Features

- [Feature
#&#8203;694](https://togithub.com/google/osv-scanner/pull/694)
    Add support for NuGet lock files version 2.

- [Feature
#&#8203;655](https://togithub.com/google/osv-scanner/pull/655)
Scan and report dependency groups (e.g. "dev dependencies") for
vulnerabilities.

- [Feature
#&#8203;702](https://togithub.com/google/osv-scanner/pull/702)
    Created an option to skip/disable upload to code scanning.

- [Feature
#&#8203;732](https://togithub.com/google/osv-scanner/pull/732)
Add option to not fail on vulnerability being found for GitHub Actions.

- [Feature
#&#8203;729](https://togithub.com/google/osv-scanner/pull/729)
    Verify the spdx licenses passed in to the license allowlist.

##### Fixes

-   [Bug #&#8203;736](https://togithub.com/google/osv-scanner/pull/736)
    Show ecosystem and version even if git is shown if the info exists.

-   [Bug #&#8203;703](https://togithub.com/google/osv-scanner/pull/703)
Return an error if both license scanning and local/offline scanning is
enabled simultaneously.

-   [Bug #&#8203;718](https://togithub.com/google/osv-scanner/pull/718)
    Fixed parsing of SBOMs generated by the latest CycloneDX.

-   [Bug #&#8203;704](https://togithub.com/google/osv-scanner/pull/704)
    Get go stdlib version from go.mod.

##### API Features

- [Feature
#&#8203;727](https://togithub.com/google/osv-scanner/pull/727)
Changes to `Reporter` methods to add verbosity levels and to deprecate
functions.

###
[`v1.5.0`](https://togithub.com/google/osv-scanner/blob/HEAD/CHANGELOG.md#v150)

[Compare
Source](https://togithub.com/google/osv-scanner/compare/v1.4.3...v1.5.0)

##### Features

- [Feature
#&#8203;501](https://togithub.com/google/osv-scanner/pull/501)
Add experimental license scanning support! See
https://osv.dev/blog/posts/introducing-license-scanning-with-osv-scanner/
for more information!
- [Feature
#&#8203;642](https://togithub.com/google/osv-scanner/pull/642)
    Support scanning `renv` files for the R language ecosystem.
- [Feature
#&#8203;513](https://togithub.com/google/osv-scanner/pull/513)
Stabilize call analysis for Go! The experimental
`--experimental-call-analysis` flag has now been updated to:
        --call-analysis=<language/all>
        --no-call-analysis=<language/all>
with call analysis for Go enabled by default. See
https://google.github.io/osv-scanner/usage/#scanning-with-call-analysis
for the documentation!
- [Feature
#&#8203;676](https://togithub.com/google/osv-scanner/pull/676)
    Simplify return codes:
    -   Return 0 if there are no findings or errors.
- Return 1 if there are any findings (license violations or
vulnerabilities).
    -   Return 128 if no packages are found.
- [Feature
#&#8203;651](https://togithub.com/google/osv-scanner/pull/651)
    CVSS v4.0 support.
- [Feature #&#8203;60](https://togithub.com/google/osv-scanner/pull/60)
    [Pre-commit hook](https://pre-commit.com/) support.

##### Fixes

- [Bug #&#8203;639](https://togithub.com/google/osv-scanner/issues/639)
We now filter local packages from scans, and report the filtering of
those packages.
- [Bug #&#8203;645](https://togithub.com/google/osv-scanner/issues/645)
    Properly handle file/url paths on Windows.
- [Bug #&#8203;660](https://togithub.com/google/osv-scanner/issues/660)
    Remove noise from failed lockfile parsing.
- [Bug #&#8203;649](https://togithub.com/google/osv-scanner/issues/649)
    No longer include vendored libraries in C/C++ package analysis.
- [Bug #&#8203;634](https://togithub.com/google/osv-scanner/issues/634)
    Fix filtering of aliases to also include non OSV aliases

##### Miscellaneous

-   The minimum go version has been updated to go1.21 from go1.18.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Author: renovate-bot

vulnfeeds/cmd/alpine/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22.4-alpine@sha256:9d8429ee88687b18c0f681ce2ad60446c7a1a3472d455f031e2317802ca9fbc4 AS GO_BUILD
+FROM golang:1.22.4-alpine@sha256:9bdd5692d39acc3f8d0ea6f81327f87ac6b473dd29a2b6006df362bff48dd1f8 AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src

vulnfeeds/cmd/combine-to-osv/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22.4-alpine@sha256:9d8429ee88687b18c0f681ce2ad60446c7a1a3472d455f031e2317802ca9fbc4 AS GO_BUILD
+FROM golang:1.22.4-alpine@sha256:9bdd5692d39acc3f8d0ea6f81327f87ac6b473dd29a2b6006df362bff48dd1f8 AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src

vulnfeeds/cmd/cpe-repo-gen/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22.4-alpine@sha256:9d8429ee88687b18c0f681ce2ad60446c7a1a3472d455f031e2317802ca9fbc4 AS GO_BUILD
+FROM golang:1.22.4-alpine@sha256:9bdd5692d39acc3f8d0ea6f81327f87ac6b473dd29a2b6006df362bff48dd1f8 AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src

vulnfeeds/cmd/debian/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22.4-alpine@sha256:9d8429ee88687b18c0f681ce2ad60446c7a1a3472d455f031e2317802ca9fbc4 AS GO_BUILD
+FROM golang:1.22.4-alpine@sha256:9bdd5692d39acc3f8d0ea6f81327f87ac6b473dd29a2b6006df362bff48dd1f8 AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src

vulnfeeds/cmd/download-cves/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22.4-alpine@sha256:9d8429ee88687b18c0f681ce2ad60446c7a1a3472d455f031e2317802ca9fbc4 AS GO_BUILD
+FROM golang:1.22.4-alpine@sha256:9bdd5692d39acc3f8d0ea6f81327f87ac6b473dd29a2b6006df362bff48dd1f8 AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src

vulnfeeds/cmd/nvd-cve-osv/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.22.4-alpine@sha256:9d8429ee88687b18c0f681ce2ad60446c7a1a3472d455f031e2317802ca9fbc4 AS GO_BUILD
+FROM golang:1.22.4-alpine@sha256:9bdd5692d39acc3f8d0ea6f81327f87ac6b473dd29a2b6006df362bff48dd1f8 AS GO_BUILD
 
 WORKDIR /go/src
 

vulnfeeds/go.mod

@@ -3,63 +3,72 @@ module github.com/google/osv/vulnfeeds
 go 1.22.4
 
 require (
-	cloud.google.com/go/logging v1.8.1
-	cloud.google.com/go/secretmanager v1.11.4
+	cloud.google.com/go/logging v1.10.0
+	cloud.google.com/go/secretmanager v1.13.1
 	github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46
-	github.com/atombender/go-jsonschema v0.14.1
-	github.com/go-git/go-git/v5 v5.11.0
+	github.com/atombender/go-jsonschema v0.16.0
+	github.com/go-git/go-git/v5 v5.12.0
 	github.com/google/go-cmp v0.6.0
-	github.com/google/osv-scanner v1.4.3
+	github.com/google/osv-scanner v1.7.4
 	github.com/knqyf263/go-cpe v0.0.0-20230627041855-cb0794d06872
 	github.com/sethvargo/go-retry v0.2.4
-	golang.org/x/exp v0.0.0-20231127185646-65229373498e
+	golang.org/x/exp v0.0.0-20240604190554-fc45aab8b7f8
 	gopkg.in/yaml.v2 v2.4.0
 )
 
 require (
-	cloud.google.com/go v0.110.8 // indirect
-	cloud.google.com/go/compute v1.23.1 // indirect
-	cloud.google.com/go/compute/metadata v0.2.3 // indirect
-	cloud.google.com/go/iam v1.1.3 // indirect
-	cloud.google.com/go/longrunning v0.5.2 // indirect
+	cloud.google.com/go v0.113.0 // indirect
+	cloud.google.com/go/auth v0.4.1 // indirect
+	cloud.google.com/go/auth/oauth2adapt v0.2.2 // indirect
+	cloud.google.com/go/compute/metadata v0.3.0 // indirect
+	cloud.google.com/go/iam v1.1.8 // indirect
+	cloud.google.com/go/longrunning v0.5.7 // indirect
 	dario.cat/mergo v1.0.0 // indirect
 	github.com/Microsoft/go-winio v0.6.1 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c // indirect
+	github.com/ProtonMail/go-crypto v1.0.0 // indirect
 	github.com/aquasecurity/go-version v0.0.0-20210121072130-637058cfe492 // indirect
 	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
+	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
 	github.com/go-git/go-billy/v5 v5.5.0 // indirect
+	github.com/go-logr/logr v1.4.1 // indirect
+	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/s2a-go v0.1.7 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
-	github.com/googleapis/gax-go/v2 v2.12.0 // indirect
+	github.com/googleapis/gax-go/v2 v2.12.4 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
 	github.com/kevinburke/ssh_config v1.2.0 // indirect
-	github.com/package-url/packageurl-go v0.1.2 // indirect
+	github.com/package-url/packageurl-go v0.1.3 // indirect
 	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/sergi/go-diff v1.3.1 // indirect
-	github.com/skeema/knownhosts v1.2.1 // indirect
+	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
+	github.com/skeema/knownhosts v1.2.2 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	go.opencensus.io v0.24.0 // indirect
-	golang.org/x/crypto v0.21.0 // indirect
-	golang.org/x/mod v0.14.0 // indirect
-	golang.org/x/net v0.23.0 // indirect
-	golang.org/x/oauth2 v0.13.0 // indirect
-	golang.org/x/sync v0.5.0 // indirect
-	golang.org/x/sys v0.18.0 // indirect
-	golang.org/x/text v0.14.0 // indirect
-	golang.org/x/tools v0.16.0 // indirect
-	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
-	google.golang.org/api v0.149.0 // indirect
-	google.golang.org/appengine v1.6.8 // indirect
-	google.golang.org/genproto v0.0.0-20231016165738-49dd2c1f3d0b // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20231016165738-49dd2c1f3d0b // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b // indirect
-	google.golang.org/grpc v1.59.0 // indirect
-	google.golang.org/protobuf v1.33.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect
+	go.opentelemetry.io/otel v1.24.0 // indirect
+	go.opentelemetry.io/otel/metric v1.24.0 // indirect
+	go.opentelemetry.io/otel/trace v1.24.0 // indirect
+	golang.org/x/crypto v0.24.0 // indirect
+	golang.org/x/mod v0.18.0 // indirect
+	golang.org/x/net v0.26.0 // indirect
+	golang.org/x/oauth2 v0.20.0 // indirect
+	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sys v0.21.0 // indirect
+	golang.org/x/text v0.16.0 // indirect
+	golang.org/x/time v0.5.0 // indirect
+	golang.org/x/tools v0.22.0 // indirect
+	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
+	google.golang.org/api v0.180.0 // indirect
+	google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20240513163218-0867130af1f8 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20240513163218-0867130af1f8 // indirect
+	google.golang.org/grpc v1.64.0 // indirect
+	google.golang.org/protobuf v1.34.1 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 )