build(deps): bump the go group with 8 updates (#1239)

Bumps the go group with 8 updates:

| Package | From | To |
| --- | --- | --- |
|
[github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane)
| `1.32.4` | `1.35.0` |
|
[github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa)
| `1.8.0` | `1.9.0` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.9` |
`1.0.10` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` |
`1.21.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` |
`0.44.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.16.0` |
`0.17.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.0` |
`1.75.1` |
| google.golang.org/protobuf | `1.36.8` | `1.36.9` |

Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.32.4 to
1.35.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/envoyproxy/go-control-plane/releases">github.com/envoyproxy/go-control-plane/envoy's
releases</a>.</em></p>
<blockquote>
<h2>envoy/v1.35.0</h2>
<p>This release roughly matches the version of envoy API at tag
<code>v1.35.0</code> (commit <a
href="https://github.com/envoyproxy/envoy/commit/ad6af72b4fcd7bf5fcb65f79676c2ee02116fe47">ad6af72b4fcd7bf5fcb65f79676c2ee02116fe47</a>,
right before <a
href="https://github.com/envoyproxy/envoy/commit/729aeec7bfc049c12b4f7dafc0c41d22a274c8a5">729aeec7bfc049c12b4f7dafc0c41d22a274c8a5</a>
attached to the tag)</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.32.4...envoy/v1.35.0">https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.32.4...envoy/v1.35.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/5321204dac14eb3ef389be392c36364d9bad4302"><code>5321204</code></a>
Mirrored from envoyproxy/envoy @
ad6af72b4fcd7bf5fcb65f79676c2ee02116fe47</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/e53293126e1f93959171af492a5017baf426e23d"><code>e532931</code></a>
build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 (<a
href="https://redirect.github.com/envoyproxy/go-control-plane/issues/1243">#1243</a>)</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/d6cfbf2f7b4280c4176e7f1c11df8f2a9528397d"><code>d6cfbf2</code></a>
Mirrored from envoyproxy/envoy @
1f468dda227cc72aa5e697fe58f3225c3ea9a5b7</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/f684dd660df0e20893f0db6d1461879554eeaa36"><code>f684dd6</code></a>
Mirrored from envoyproxy/envoy @
0d84e1a182adba9360a7d5405cabcc3fbd4b6320</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/668d79f7e258c201c42debb60433b4befe76cea8"><code>668d79f</code></a>
Mirrored from envoyproxy/envoy @
c5f37fde4a7a5910e4426c58b614b1d79fa137b2</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/8d3588c691984fd6c4b272a8ca9c2154c1562dd1"><code>8d3588c</code></a>
Mirrored from envoyproxy/envoy @
274d68f02971c1cf0da1628991126e8ebd307d25</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/246b6834819d7e85c03ce8692419770d3611edf0"><code>246b683</code></a>
build(deps): Bump github.com/golangci/golangci-lint/v2 (<a
href="https://redirect.github.com/envoyproxy/go-control-plane/issues/1241">#1241</a>)</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/bb3dbddf879e3d9855a5dbe5d368212e2a336bd7"><code>bb3dbdd</code></a>
Mirrored from envoyproxy/envoy @
877b9824370232745db11cf65417b8d88b4d38c5</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/8537c47af322362923a204084db20a3ed7971869"><code>8537c47</code></a>
Mirrored from envoyproxy/envoy @
668642e2b8c4f5d1bfa144ce99c7583ed26ccc87</li>
<li><a
href="https://github.com/envoyproxy/go-control-plane/commit/be90dcf23f5eded19884f6ad006099005ee71526"><code>be90dcf</code></a>
Mirrored from envoyproxy/envoy @
9ba9a1b59773b13f9a6c2bd936034300c1fb47bf</li>
<li>Additional commits viewable in <a
href="https://github.com/envoyproxy/go-control-plane/compare/envoy/v1.32.4...envoy/v1.35.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/open-policy-agent/opa` from 1.8.0 to 1.9.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-policy-agent/opa/releases">github.com/open-policy-agent/opa's
releases</a>.</em></p>
<blockquote>
<h2>v1.9.0</h2>
<p>This release contains a mix of new features, performance
improvements, and bugfixes. Notably:</p>
<ul>
<li>Compile API extensions ported from EOPA</li>
<li>Improved rule indexing</li>
</ul>
<h3>Compile Rego Queries Into SQL Filters (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7887">#7887</a>)</h3>
<p>Compile API extensions with support for SQL filter generation
previously exclusive to EOPA has been ported into OPA.</p>
<h4>Example</h4>
<p>With OPA running with this policy, we'll compile the query
<code>data.filters.include</code> into SQL filters:</p>
<pre lang="rego"><code>package filters
<h1>METADATA</h1>
<h1>scope: document</h1>
<h1>compile:</h1>
<h1>unknowns: [input.fruits]</h1>
<p>include if input.fruits.name == input.favorite
</code></pre></p>
<h5>Example Request</h5>
<pre><code>POST /v1/compile/filters/include HTTP/1.1
Content-Type: application/json
Accept: application/vnd.opa.sql.postgresql+json
</code></pre>
<pre lang="json"><code>{
  &quot;input&quot;: {
    &quot;favorite&quot;: &quot;pineapple&quot;
  }
}
</code></pre>
<h5>Example Response</h5>
<pre><code>HTTP/1.1 200 OK
Content-Type: application/vnd.opa.sql.postgresql+json
</code></pre>
<pre lang="json"><code>{
  &quot;result&quot;: {
    &quot;query&quot;: &quot;WHERE fruits.name = E'pineapple'&quot;
  }
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md">github.com/open-policy-agent/opa's
changelog</a>.</em></p>
<blockquote>
<h2>1.9.0</h2>
<p>This release contains a mix of new features, performance
improvements, and bugfixes. Notably:</p>
<ul>
<li>Compile API extensions ported from EOPA</li>
<li>Improved rule indexing</li>
</ul>
<h3>Compile Rego Queries Into SQL Filters (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7887">#7887</a>)</h3>
<p>Compile API extensions with support for SQL filter generation
previously exclusive to EOPA has been ported into OPA.</p>
<h4>Example</h4>
<p>With OPA running with this policy, we'll compile the query
<code>data.filters.include</code> into SQL filters:</p>
<pre lang="rego"><code>package filters
<h1>METADATA</h1>
<h1>scope: document</h1>
<h1>compile:</h1>
<h1>unknowns: [input.fruits]</h1>
<p>include if input.fruits.name == input.favorite
</code></pre></p>
<h5>Example Request</h5>
<pre><code>POST /v1/compile/filters/include HTTP/1.1
Content-Type: application/json
Accept: application/vnd.opa.sql.postgresql+json
</code></pre>
<pre lang="json"><code>{
  &quot;input&quot;: {
    &quot;favorite&quot;: &quot;pineapple&quot;
  }
}
</code></pre>
<h5>Example Response</h5>
<pre><code>HTTP/1.1 200 OK
Content-Type: application/vnd.opa.sql.postgresql+json
</code></pre>
<pre lang="json"><code>{
  &quot;result&quot;: {
    &quot;query&quot;: &quot;WHERE fruits.name = E'pineapple'&quot;
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-policy-agent/opa/commit/c49e670294e45bb3fd76b9e945cf821478a4bbfc"><code>c49e670</code></a>
Prepare v1.9.0 release (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7940">#7940</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/3738431aa0a2ba23439494efda211745d4ca8149"><code>3738431</code></a>
rego: Add comprehensive WASM performance benchmarks (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7841">#7841</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/e35e9a80006bdc89b3b1a7acd7211409edbe5f9a"><code>e35e9a8</code></a>
build(deps): bump the gha-dependencies group with 5 updates</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/85a0e2a28c862c480c157b6a71d95ee1ecf824b4"><code>85a0e2a</code></a>
Compile API: switch to compile annotation key (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7936">#7936</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/9c1cf16d4b09610ce9b6fb4be9cd36f4da77c688"><code>9c1cf16</code></a>
build(deps): bump the go-opentelemetry-io group across 1 directory with
7 upd...</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/c24ad37baf14efd0b252e55810233d6323a52d09"><code>c24ad37</code></a>
plugin/decision: encoder return event same size as limit immediately (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7928">#7928</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/162edffed02f0be72056513eda3a8c3bea030f53"><code>162edff</code></a>
docs: Add Style Guide to policy authoring docs (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7932">#7932</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/008c9da55fefb368888aac9ede09416da5586998"><code>008c9da</code></a>
docs: Update references to cheat sheet and awesome-opa (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7930">#7930</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/1e999ec0dad83e269262bff6486eb863d7929b70"><code>1e999ec</code></a>
plugin/decision: correctly reconfigure limit based on buffer type (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7926">#7926</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/d3d014d18d0c932401ddc4fb6ecab495d2e167a9"><code>d3d014d</code></a>
build(deps): bump the dependencies group across 2 directories with 12
updates</li>
<li>Additional commits viewable in <a
href="https://github.com/open-policy-agent/opa/compare/v1.8.0...v1.9.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/spf13/pflag` from 1.0.9 to 1.0.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/pflag/releases">github.com/spf13/pflag's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.10</h2>
<h2>What's Changed</h2>
<ul>
<li>fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/spf13/pflag/pull/447">spf13/pflag#447</a></li>
<li>remove uses of errors.Is, which requires go1.13, move go1.16/go1.21
tests to separate file by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/spf13/pflag/pull/448">spf13/pflag#448</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a>
made their first contribution in <a
href="https://redirect.github.com/spf13/pflag/pull/447">spf13/pflag#447</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10">https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/spf13/pflag/commit/0491e5702ad2bb108bc519a5221bcc0f52aa9564"><code>0491e57</code></a>
Merge pull request <a
href="https://redirect.github.com/spf13/pflag/issues/448">#448</a> from
thaJeztah/fix_go_version</li>
<li><a
href="https://github.com/spf13/pflag/commit/72abab1d978352c34a7274f374d30f413e1c83f3"><code>72abab1</code></a>
Merge pull request <a
href="https://redirect.github.com/spf13/pflag/issues/447">#447</a> from
thaJeztah/fix_deprecation_comment</li>
<li><a
href="https://github.com/spf13/pflag/commit/7e4dfb1e325ce429e29994933210abe53de7041d"><code>7e4dfb1</code></a>
Test on Go 1.12</li>
<li><a
href="https://github.com/spf13/pflag/commit/18a9d17d0ee8bd64d5c2071fc031be86fa2cd328"><code>18a9d17</code></a>
move Func, BoolFunc, tests as they require go1.21</li>
<li><a
href="https://github.com/spf13/pflag/commit/c5b9e989df31c5d19573e50d6188550ad51a971e"><code>c5b9e98</code></a>
remove uses of errors.Is, which requires go1.13</li>
<li><a
href="https://github.com/spf13/pflag/commit/45a48733e35ba296a5f4dcc2b01996b89dc91a06"><code>45a4873</code></a>
fix deprecation comment for (FlagSet.)ParseErrorsWhitelist</li>
<li>See full diff in <a
href="https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/viper/releases">github.com/spf13/viper's
releases</a>.</em></p>
<blockquote>
<h2>v1.21.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Enhancements 🚀</h3>
<ul>
<li>Add support for flags pflag.BoolSlice, pflag.UintSlice and
pflag.Float64Slice by <a
href="https://github.com/nmvalera"><code>@​nmvalera</code></a> in <a
href="https://redirect.github.com/spf13/viper/pull/2015">spf13/viper#2015</a></li>
<li>feat: use maintained yaml library by <a
href="https://github.com/sagikazarmark"><code>@​sagikazarmark</code></a>
in <a
href="https://redirect.github.com/spf13/viper/pull/2040">spf13/viper#2040</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(config): get config type from v.configType or config file ext by
<a
href="https://github.com/GuillaumeBAECHLER"><code>@​GuillaumeBAECHLER</code></a>
in <a
href="https://redirect.github.com/spf13/viper/pull/2003">spf13/viper#2003</a></li>
<li>fix: config type check when loading any config by <a
href="https://github.com/sagikazarmark"><code>@​sagikazarmark</code></a>
in <a
href="https://redirect.github.com/spf13/viper/pull/2007">spf13/viper#2007</a></li>
</ul>
<h3>Dependency Updates ⬆️</h3>
<ul>
<li>Update dependencies by <a
href="https://github.com/sagikazarmark"><code>@​sagikazarmark</code></a>
in <a
href="https://redirect.github.com/spf13/viper/pull/1993">spf13/viper#1993</a></li>
<li>build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2017">spf13/viper#2017</a></li>
<li>build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to
2.2.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2013">spf13/viper#2013</a></li>
<li>build(deps): bump github.com/sagikazarmark/locafero from 0.8.0 to
0.9.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2008">spf13/viper#2008</a></li>
<li>build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /remote
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2016">spf13/viper#2016</a></li>
<li>build(deps): bump github.com/spf13/cast from 1.8.0 to 1.9.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2020">spf13/viper#2020</a></li>
<li>build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to
2.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2028">spf13/viper#2028</a></li>
<li>build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to
2.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2035">spf13/viper#2035</a></li>
<li>build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2036">spf13/viper#2036</a></li>
<li>build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2012">spf13/viper#2012</a></li>
<li>build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2052">spf13/viper#2052</a></li>
<li>build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to
2.4.0 in /remote by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2048">spf13/viper#2048</a></li>
<li>build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/spf13/viper/pull/2056">spf13/viper#2056</a></li>
<li>chore: update dependencies by <a
href="https://github.com/sagikazarmark"><code>@​sagikazarmark</code></a>
in <a
href="https://redirect.github.com/spf13/viper/pull/2057">spf13/viper#2057</a></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Update update guide with <code>mapstructure</code> package
replacement. by <a
href="https://github.com/aldas"><code>@​aldas</code></a> in <a
href="https://redirect.github.com/spf13/viper/pull/2004">spf13/viper#2004</a></li>
<li>refactor: use the built-in max/min to simplify the code by <a
href="https://github.com/yingshanghuangqiao"><code>@​yingshanghuangqiao</code></a>
in <a
href="https://redirect.github.com/spf13/viper/pull/2029">spf13/viper#2029</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/GuillaumeBAECHLER"><code>@​GuillaumeBAECHLER</code></a>
made their first contribution in <a
href="https://redirect.github.com/spf13/viper/pull/2003">spf13/viper#2003</a></li>
<li><a href="https://github.com/aldas"><code>@​aldas</code></a> made
their first contribution in <a
href="https://redirect.github.com/spf13/viper/pull/2004">spf13/viper#2004</a></li>
<li><a href="https://github.com/nmvalera"><code>@​nmvalera</code></a>
made their first contribution in <a
href="https://redirect.github.com/spf13/viper/pull/2015">spf13/viper#2015</a></li>
<li><a
href="https://github.com/yingshanghuangqiao"><code>@​yingshanghuangqiao</code></a>
made their first contribution in <a
href="https://redirect.github.com/spf13/viper/pull/2029">spf13/viper#2029</a></li>
<li><a href="https://github.com/ccoVeille"><code>@​ccoVeille</code></a>
made their first contribution in <a
href="https://redirect.github.com/spf13/viper/pull/2046">spf13/viper#2046</a></li>
<li><a href="https://github.com/spacez320"><code>@​spacez320</code></a>
made their first contribution in <a
href="https://redirect.github.com/spf13/viper/pull/2050">spf13/viper#2050</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/spf13/viper/compare/v1.20.0...v1.21.0">https://github.com/spf13/viper/compare/v1.20.0...v1.21.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/spf13/viper/commit/394040caccbdf5821fa6839386a35f0fb1b1ee9e"><code>394040c</code></a>
ci: build on go 1.25</li>
<li><a
href="https://github.com/spf13/viper/commit/812f548100ce43c96cf2ef6914fa3aea3c9885e2"><code>812f548</code></a>
chore: update dependencies</li>
<li><a
href="https://github.com/spf13/viper/commit/d5271efd81369475d8b49e85ce35cfe83359a991"><code>d5271ef</code></a>
ci: update stale workflow</li>
<li><a
href="https://github.com/spf13/viper/commit/dff303b19f6859ea69d0f48a3343765c25ce5ad2"><code>dff303b</code></a>
feat: add a stale issue scheduled action</li>
<li><a
href="https://github.com/spf13/viper/commit/12879766ad2fccd4875e8dc5ba96ce5f28357842"><code>1287976</code></a>
build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10</li>
<li><a
href="https://github.com/spf13/viper/commit/38932cd79521272eb1634d81eb1c200fa1803008"><code>38932cd</code></a>
build(deps): bump github.com/go-viper/mapstructure/v2 in /remote</li>
<li><a
href="https://github.com/spf13/viper/commit/6d014bec7784acab13d7d7eb2adcb6814bac2f89"><code>6d014be</code></a>
build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1</li>
<li><a
href="https://github.com/spf13/viper/commit/b74c7ee1e5e999f16bc2b904608815a59241b316"><code>b74c7ee</code></a>
build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0</li>
<li><a
href="https://github.com/spf13/viper/commit/acd05e1543b0c36b36580b6bd29c53a9b62acd98"><code>acd05e1</code></a>
fix: linting issues</li>
<li><a
href="https://github.com/spf13/viper/commit/ae5a8e23e22a67a6dcc2025cef0b5a2ca7615456"><code>ae5a8e2</code></a>
ci: upgrade golangci-lint</li>
<li>Additional commits viewable in <a
href="https://github.com/spf13/viper/compare/v1.20.1...v1.21.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/net` from 0.43.0 to 0.44.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/net/commit/3b23d576ea72235a3fef8f157eb5ab76e65854a8"><code>3b23d57</code></a>
http2: fix race condition when disabling goroutine debugging for one
test</li>
<li><a
href="https://github.com/golang/net/commit/87410502ff26318c9bd1be1c9a09e0a681774dcf"><code>8741050</code></a>
http2: simplify TestServer_Push_RejectAfterGoAway</li>
<li><a
href="https://github.com/golang/net/commit/96e405cac15ef9a113f2b30d3f3f8a216234f09c"><code>96e405c</code></a>
http2: modernize TestTransportRoundtripCloseOnWriteError</li>
<li><a
href="https://github.com/golang/net/commit/6dc6880bcd7edc82184626a363d26d65bc55c195"><code>6dc6880</code></a>
http2: simplify ClientConn Close and Shutdown tests</li>
<li><a
href="https://github.com/golang/net/commit/4e2915b652483bfc9831c080e40c679e42616f03"><code>4e2915b</code></a>
http2: modernize TestTransportAllocationsAfterResponseBodyClose</li>
<li><a
href="https://github.com/golang/net/commit/30b0e78859f03d66b2e275870d5d37455d2f0fb0"><code>30b0e78</code></a>
http2: modernize TestRoundTripDoesntConsumeRequestBodyEarly</li>
<li><a
href="https://github.com/golang/net/commit/b9acd777f1852925992bdeaa623de8cc86efa4eb"><code>b9acd77</code></a>
http2: speed up TestTransportFlowControl</li>
<li><a
href="https://github.com/golang/net/commit/5153f4db3143a3be6ce383b512ba7a4c0f935211"><code>5153f4d</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/net/commit/9338bdd9eeddfeab331342288acfef2293474490"><code>9338bdd</code></a>
http2: speed up TestTransportHandlerBodyClose</li>
<li><a
href="https://github.com/golang/net/commit/6b200364a6614a5cf8d360d854e998c1dc739f24"><code>6b20036</code></a>
http2: add synchronous handler support to serverTester</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/net/compare/v0.43.0...v0.44.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/sync` from 0.16.0 to 0.17.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/sync/commit/04914c200cb38d4ea960ee6a4c314a028c632991"><code>04914c2</code></a>
all: upgrade go directive to at least 1.24.0 [generated]</li>
<li>See full diff in <a
href="https://github.com/golang/sync/compare/v0.16.0...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `google.golang.org/grpc` from 1.75.0 to 1.75.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.75.1</h2>
<h1>Bug Fixes</h1>
<ul>
<li>transport: Fix a data race while copying headers for stats handlers
in the std lib http2 server transport. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8519">#8519</a>)</li>
<li>xdsclient:
<ul>
<li>Fix a data race caused while reporting load to LRS. (<a
href="https://redirect.github.com/grpc/grpc-go/pull/8483">#8483</a>)</li>
<li>Fix regression preventing empty node IDs when creating an LRS
client. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8483">#8483</a>)</li>
</ul>
</li>
<li>server: Fix a regression preventing streams from being cancelled or
timed out when blocked on flow control. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8528">#8528</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/b4dc263cb692d1951a1842cc877d913d30de0559"><code>b4dc263</code></a>
Change version to 1.75.1 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8559">#8559</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/1fffee7cbccdfcf4a973ea3ce4d7e7dd2aa63cfd"><code>1fffee7</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/8528">#8528</a> to
v1.75.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8555">#8555</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/a52e42be78d406f40dd5888e999c229fb2d63044"><code>a52e42b</code></a>
Cherry pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/8483">#8483</a>
into v1.75.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8541">#8541</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/369c9aa6cedbd23e46df8d6ba851e6a2fc3e459a"><code>369c9aa</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/8519">#8519</a> to
v1.75.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8530">#8530</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/7269d5fe7026b29be98c5db85e978916b37496dd"><code>7269d5f</code></a>
Change version to 1.75.1-dev (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8494">#8494</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.75.0...v1.75.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `google.golang.org/protobuf` from 1.36.8 to 1.36.9


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -4,7 +4,7 @@ go 1.24.6
 
 require (
 	github.com/cenkalti/backoff/v4 v4.3.0
-	github.com/envoyproxy/go-control-plane/envoy v1.32.4
+	github.com/envoyproxy/go-control-plane/envoy v1.35.0
 	github.com/go-logr/logr v1.4.3
 	github.com/go-logr/zapr v1.3.0
 	github.com/go-playground/validator/v10 v10.27.0
@@ -15,21 +15,21 @@ require (
 	github.com/hashicorp/go-set/v3 v3.0.1
 	github.com/iancoleman/strcase v0.3.0
 	github.com/martinlindhe/base36 v1.1.1
-	github.com/open-policy-agent/opa v1.8.0
+	github.com/open-policy-agent/opa v1.9.0
 	github.com/pomerium/pomerium v0.28.1-0.20250930205726-e4854c414f5e
 	github.com/rs/zerolog v1.34.0
 	github.com/sergi/go-diff v1.4.0
 	github.com/spf13/cobra v1.10.1
-	github.com/spf13/pflag v1.0.9
-	github.com/spf13/viper v1.20.1
+	github.com/spf13/pflag v1.0.10
+	github.com/spf13/viper v1.21.0
 	github.com/stretchr/testify v1.11.1
 	github.com/volatiletech/null/v9 v9.0.0
 	go.uber.org/mock v0.6.0
 	go.uber.org/zap v1.27.0
-	golang.org/x/net v0.43.0
-	golang.org/x/sync v0.16.0
-	google.golang.org/grpc v1.75.0
-	google.golang.org/protobuf v1.36.8
+	golang.org/x/net v0.44.0
+	golang.org/x/sync v0.17.0
+	google.golang.org/grpc v1.75.1
+	google.golang.org/protobuf v1.36.9
 	gopkg.in/yaml.v3 v3.0.1
 	k8s.io/api v0.34.0
 	k8s.io/apiextensions-apiserver v0.34.0
@@ -179,9 +179,11 @@ require (
 	github.com/kr/text v0.2.0 // indirect
 	github.com/leodido/go-urn v1.4.0 // indirect
 	github.com/lestrrat-go/blackmagic v1.0.4 // indirect
+	github.com/lestrrat-go/dsig v1.0.0 // indirect
+	github.com/lestrrat-go/dsig-secp256k1 v1.0.0 // indirect
 	github.com/lestrrat-go/httpcc v1.0.1 // indirect
-	github.com/lestrrat-go/httprc/v3 v3.0.0 // indirect
-	github.com/lestrrat-go/jwx/v3 v3.0.10 // indirect
+	github.com/lestrrat-go/httprc/v3 v3.0.1 // indirect
+	github.com/lestrrat-go/jwx/v3 v3.0.11 // indirect
 	github.com/lestrrat-go/option v1.0.1 // indirect
 	github.com/lestrrat-go/option/v2 v2.0.0 // indirect
 	github.com/libdns/libdns v1.0.0 // indirect
@@ -218,26 +220,26 @@ require (
 	github.com/pomerium/protoutil v0.0.0-20240813175624-47b7ac43ff46 // indirect
 	github.com/pomerium/webauthn v0.0.0-20240603205124-0428df511172 // indirect
 	github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
-	github.com/prometheus/client_golang v1.23.0 // indirect
+	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.65.0 // indirect
+	github.com/prometheus/common v0.66.1 // indirect
 	github.com/prometheus/otlptranslator v0.0.2 // indirect
 	github.com/prometheus/procfs v0.17.0 // indirect
 	github.com/prometheus/statsd_exporter v0.22.7 // indirect
-	github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
+	github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/rogpeppe/go-internal v1.13.1 // indirect
 	github.com/rs/cors v1.11.1 // indirect
-	github.com/sagikazarmark/locafero v0.7.0 // indirect
+	github.com/sagikazarmark/locafero v0.11.0 // indirect
 	github.com/sahilm/fuzzy v0.1.1 // indirect
 	github.com/segmentio/asm v1.2.0 // indirect
 	github.com/shirou/gopsutil/v3 v3.24.5 // indirect
 	github.com/shoenig/go-m1cpu v0.1.6 // indirect
 	github.com/shogo82148/go-sfv v0.3.3 // indirect
-	github.com/sirupsen/logrus v1.9.3 // indirect
-	github.com/sourcegraph/conc v0.3.0 // indirect
-	github.com/spf13/afero v1.12.0 // indirect
-	github.com/spf13/cast v1.7.1 // indirect
+	github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af // indirect
+	github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 // indirect
+	github.com/spf13/afero v1.15.0 // indirect
+	github.com/spf13/cast v1.10.0 // indirect
 	github.com/spiffe/go-spiffe/v2 v2.5.0 // indirect
 	github.com/stoewer/go-strcase v1.3.0 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
@@ -282,14 +284,14 @@ require (
 	go.uber.org/zap/exp v0.3.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.41.0 // indirect
+	golang.org/x/crypto v0.42.0 // indirect
 	golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f // indirect
 	golang.org/x/mod v0.27.0 // indirect
 	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sys v0.35.0 // indirect
-	golang.org/x/term v0.34.0 // indirect
-	golang.org/x/text v0.28.0 // indirect
-	golang.org/x/time v0.12.0 // indirect
+	golang.org/x/sys v0.36.0 // indirect
+	golang.org/x/term v0.35.0 // indirect
+	golang.org/x/text v0.29.0 // indirect
+	golang.org/x/time v0.13.0 // indirect
 	golang.org/x/tools v0.36.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
 	google.golang.org/api v0.247.0 // indirect