ci: update dependencies (#1426)

This PR updates dependencies not managed by dependabot.

---------

Co-authored-by: GitHub Actions <apparitor@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <caleb@doxsey.net>

Author: apparitor

go.mod

@@ -18,7 +18,7 @@ require (
 	github.com/iancoleman/strcase v0.3.0
 	github.com/martinlindhe/base36 v1.1.1
 	github.com/open-policy-agent/opa v1.16.1
-	github.com/pomerium/pomerium v0.32.5-rc.1.0.20260526142609-3094c1c57aff
+	github.com/pomerium/pomerium v0.32.5-rc.1.0.20260527123055-046a073c9419
 	github.com/pomerium/sdk-go v0.0.10-0.20260407162330-4596c91f544d
 	github.com/rs/zerolog v1.35.1
 	github.com/sergi/go-diff v1.4.0

go.sum

@@ -779,8 +779,8 @@ github.com/pomerium/datasource v0.18.2-0.20260522171636-b4b4ac7fe219 h1:h/q6ZWXm
 github.com/pomerium/datasource v0.18.2-0.20260522171636-b4b4ac7fe219/go.mod h1:AvH9IIKbQA9S6MTFHc5YL/xaJf/wLfVd8dWenK5B7TI=
 github.com/pomerium/envoy-custom v1.37.0-rc3.0.20260519214603-7724aff26b06 h1:03u4+2HwelwofsKH2dGyeqD4Rm78xEQ00FNKKcSvfdY=
 github.com/pomerium/envoy-custom v1.37.0-rc3.0.20260519214603-7724aff26b06/go.mod h1:7Svo/CaRt9vfJ22sEC+T/q/y2WNi/cZTlugNYUS7xwI=
-github.com/pomerium/pomerium v0.32.5-rc.1.0.20260526142609-3094c1c57aff h1:ZgLvhUKF/h10hRCWhkkIpDOKU90ZMf04JzLfc8l1xF4=
-github.com/pomerium/pomerium v0.32.5-rc.1.0.20260526142609-3094c1c57aff/go.mod h1:xAXINmOYo4VDacOdO/Ap61aKwt7TtaYZXMxpwhN65Nc=
+github.com/pomerium/pomerium v0.32.5-rc.1.0.20260527123055-046a073c9419 h1:ADg9ZKCEL4cCycvQCUTVw3NVYBRc+08P9OpaRBKoIOc=
+github.com/pomerium/pomerium v0.32.5-rc.1.0.20260527123055-046a073c9419/go.mod h1:xAXINmOYo4VDacOdO/Ap61aKwt7TtaYZXMxpwhN65Nc=
 github.com/pomerium/protoutil v0.0.0-20260508203012-e09f8af90da5 h1:qn/jJOvNR6xx9Wynx0VkHjZ/z3WCm5U+BTzQEMYWkuI=
 github.com/pomerium/protoutil v0.0.0-20260508203012-e09f8af90da5/go.mod h1:ERFmbEXYDOhFJjgzLJJ2AJkYKmm/naM7Isul3u5pGtI=
 github.com/pomerium/sdk-go v0.0.10-0.20260407162330-4596c91f544d h1:DdHPrdQNSjU3J1DsqWKcxh/pHlNkAgjtj32vzbcEXPo=

internal/testutil/databroker.go

@@ -23,9 +23,7 @@ import (
 // NewInMemoryDataBroker creates a new in-memory databroker.
 func NewInMemoryDataBroker(tb testing.TB) databrokerpb.DataBrokerServiceClient {
 	key := bytes.Repeat([]byte{0x01}, 32)
-	cfg := &config.Config{
-		Options: config.NewDefaultOptions(),
-	}
+	cfg := config.New(config.NewDefaultOptions())
 	cfg.Options.SharedKey = base64.StdEncoding.EncodeToString(key)
 	srv := databroker.NewServer(noop.NewTracerProvider(), cfg)
 	srv.OnConfigChange(tb.Context(), cfg)

pomerium/ctrl/config_test.go

@@ -15,17 +15,17 @@ func TestConfigChangeDetect(t *testing.T) {
 	cfg := new(ctrl.InMemoryConfigSource)
 
 	ctx := context.Background()
-	def := *config.NewDefaultOptions()
+	def := config.New(config.NewDefaultOptions())
 	for _, tc := range []struct {
 		msg    string
 		expect bool
-		config.Options
+		cfg    *config.Config
 	}{
 		{"initial", true, def},
 		{"same initial", false, def},
 		{"same again", false, def},
-		{"changed", true, config.Options{}},
+		{"changed", true, config.New(config.NewDefaultOptions())},
 	} {
-		assert.Equal(t, tc.expect, cfg.SetConfig(ctx, &config.Config{Options: &tc.Options}), tc.msg)
+		assert.Equal(t, tc.expect, cfg.SetConfig(ctx, tc.cfg), tc.msg)
 	}
 }

pomerium/validate.go

@@ -38,7 +38,8 @@ func validate(ctx context.Context, cfg *pb.Config, id string) error {
 		return err
 	}
 
-	pCfg := &config.Config{Options: options, OutboundPort: "8002"}
+	pCfg := config.New(options)
+	pCfg.OutboundPort = "8002"
 
 	builder := envoyconfig.New("127.0.0.1:8000",
 		"127.0.0.1:8001",