upgrade to latest dependencies

bumping golang.org/x/mod dec0365...52289f1:
  > 52289f1 modfile: fix trailing empty lines in require blocks
bumping golang.org/x/text d42948e...3b64043:
  > 3b64043 go.mod: update golang.org/x dependencies
  > 1e59086 message/pipeline: add two Unalias calls
bumping golang.org/x/time 772484e...2c6c5a2:
  > 2c6c5a2 rate: prevent overflows when calculating durationFromTokens
  > 1ce61fe rate: make function comment match function name
  > 3846194 README: don't recommend go get
bumping golang.org/x/tools 1743d1a...09747cd:
  > 09747cd go.mod: update golang.org/x dependencies
  > dc9353b gopls/internal/analysis/modernize: appendclipped: unclip
  > a886a1c internal/analysisinternal: AddImport handles dot imports
  > 94c3c49 go/analysis/analysistest: RunWithSuggestedFix: assume valid fixes
  > 5f9967d gopls/internal/analysis/modernize: strings.Split -> SplitSeq
  > a1eb5fd go/analysis/passes/framepointer: support arm64
  > 9c087d9 internal/analysis/gofix: change "forward" back to "inline"
  > 82317ce gopls/internal/analysis/modernize: slices.Delete: import slices
  > e65ea15 go/analysis/internal/checker: implement three-way merge
  > a9bf6fd gopls/internal/analysis/modernize: remove SortStable
  > 4d1de70 internal/apidiff: remove
  > 584f556 gopls/internal/cache: downgrade bug reports for inconsistent metadata
  > fa7774c gopls/internal/test/integration: reduce flakes in TestTelemetryPrompt
  > 8baecea gopls/internal/analysis/modernize: mapsloop: fix two bugs
  > 1320197 gopls/internal/analysis/modernize/cmd/modernize: create
  > 0dc10dc gopls/internal/analysis/gofix: use cursor API
  > 2088703 gopls/internal/util/moreiters: iterator functions
  > 0fd02ca gopls/internal/telemetry/cmd/stacks: tweak IgnoreSymbolContains
  > 5a1ba4d gopls/doc/release/v0.18.0: describe inline analyzer
  > 03a72db gopls/internal/analysis/gofix: move and rename
  > bf4db91 gopls/internal/analysis/modernize: for i := 0; i < n; i++ -> range n
  > 73edff8 gopls/internal/cache/testfuncs: fix matching of test names
  > 0a1a6c7 gopls/doc/release: document the new workspaceFiles option
  > bcb63f9 internal/refactor/inline/analyzer: redo directive parsing
  > 6557d18 internal/refactor/inline/analyzer: handle cross-package constants
  > 74b5526 gopls/internal/golang: support package symbols
  > e8d5340 gopls/imports: use a module cache index
  > 3626367 gopls/internal/golang: hide signature help
  > 8e4c841 gopls/internal/server: embed style metadata in vulncheck progress
  > 33e624f internal/refactor/inline/analyzer: document
  > 70a7d86 internal/refactor/inline/analyzer: use forward for consts
  > 0556adb gopls: skip unusedparams for generated files
  > e9f7be9 internal/astutil/cursor: add Cursor.Child(Node) Cursor
  > f912a4f internal/refactor/inline/analyzer: inline consts into local scopes
  > 0abda08 internal/refactor/inline/analyzer: export only cross-package facts
  > 88d91cb internal/refactor/inline/analyzer: same-package consts
  > 269282d go/analysis/passes/stdversion: use Go 1.22 functionality
  > da3a6b2 internal/settings: add inliner to analyses
  > b3bde13 x/tools: use types.VarKind consistently
  > 51f179c gopls/internal/golang: downgrade bug report in ExtractToNewFile
  > 5ffcf75 internal/refactor/inline: avoid crash when inlining empty function
  > dace8c8 gopls/internal/analysis/modernize: fix bug in slicescontains
  > b781375 gopls/internal/protocol: delete MappedRange
  > bbe00fb gopls/internal/server: gopls.vulncheck return both vuln report and token
  > 058d583 gopls/internal/golang: don't apply edits in codeAction/resolve
  > a721d4c internal/typesinternal: factor out IsPackageLevel
  > f0ddc4b gopls/internal/analysis: use Cursor.Edge in two analyzers
  > 80ffd3c internal/astutil/cursor: add Cursor.Edge method
  > db7fffc go/ast/inspector: separate stack + event types
  > d648f91 go/ast/inspector: fork ast.Inspect
  > d68fc51 internal/diff: Merge
  > 9f450b0 go/analysis/passes/printf: suppress errors for non-const format strings
  > e426616 godoc,present,refactor: modernize
  > 8171d94 gopls/internal/analysis/fillstruct: preserve existing formatting
  > ac81e9f internal/testenv: RedirectStderr: fix race
  > bce67c4 go/analysis/internal/checker: validate SuggestedFixes
  > bb0a9cd gopls: remove go.sum files from integration tests
  > edafbe5 tools: fix typos in docs and comments
  > 891e3b6 internal/telemetry/cmd/stacks: cmd/compile reopen
  > 4f1e910 internal/telemetry/cmd/stacks: reopen issues
  > 114ac82 go/analysis: preparatory cleanups
  > 1c9f002 internal/gocommand: add openbsd to the set of GOOS to debug
  > f055343 internal/telemetry/cmd/stacks: divert GitHub changes during testing
  > 3e68f53 internal/telemetry/cmd/stacks: add GitHub client
  > 45227b6 internal/modindex: add LookupAll(pkg, names)
  > 71c7ff3 gopls: report SemanticHighlight for format string directives
  > 7a015ab internal/gocommand: send SIGQUIT to hanging go commands on posix
  > fcc9d81 internal/telemetry/cmd/stacks: anchored literals
  > 684910f internal/telemetry/cmd/stacks: fix distinctStacks
  > d5cd1f8 gopls: add WorkspaceFiles option
  > 30bd6fd internal/telemetry/cmd/stacks: move dry run checks down
  > e4adc38 internal/telemetry/cmd/stacks: remove Issue.predicateText
  > 8bf2b65 gopls/internal/cache: add more debugging for golang/go# 64235
  > 7479e1b internal/telemetry/cmd/stacks: test predicates
  > 726ba32 internal/telemetry/cmd/stacks: minor tweaks
  > 9f4a509 gopls/internal/telemetry/cmd/stacks: add dry run flag
  > 38d0631 gopls/internal/test: update hover test to be tolerant proxy changes
  > b0164fc gopls/doc/release: add semantic token config change
  > 96a07bb gopls/internal/settings: include deprecation message in api-json
  > df4e4ef ssa: fix typo in doc comment for Program.FuncValue
  > 1261a24 gopls/internal/analysis/modernize: slicesdelete
  > cab6608 gopls/internal/golang/completion: fix crash adding receiver type params
  > 32c4665 gopls/internal/golang/completion: avoid crash in comment completion
  > 85e8b42 gopls/internal/analysis/modernize: omitzero
  > 344e482 golang/internal/highlight: check idx < len before indexing
  > 4828981 gopls/internal/telemetry/cmd/stacks: build compiler from root
  > 3f87563 go/cfg: remove empty goto (without label) from test case
  > 9d9b0b6 go/packages: use go.dev/issue links in comment
  > 66ef73e gopls/internal/golang: improve "toggle compiler opt details"
  > 79cde82 gopls/internal/protocol/command: remove the redundant gopls.test command
  > 7d99ad7 gopls/internal/highlight: DocumentHighlight for format strings
  > 4403100 gopls/internal/golang: customize semantic token types and modifiers
  > c9ef861 gopls/internal/telemetry/cmd/stacks: don't forward GOEXPERIMENT from env
  > 0933021 go/ssa: remove coretype_test.go
  > 73a7070 gopls/internal/telemetry/cmd/stacks: paginate issue search
  > fec8580 gopls/internal/analysis/modernize: replace loop with slices.Contains
  > ee36e77 gopls/internal/telemetry/cmd/stacks: support cmd/compile
  > 8a5a6d7 gopls/internal/telemetry/cmd/stacks: refactor report processing to support different programs
  > 5fef1f2 gopls/internal/telemetry/cmd/stacks: add cmd/compile support to readPCLineTable
  > 1335f05 gopls/internal/util/frob: Decode: improve panic on empty
  > 0b95e04 gopls: filter out hints for closed files and make modernizers hints
  > 8f9869c go/ssa: use NormalTerms
  > 8912752 gopls/internal/protocol: optimized DocumentURI.Path for MODCACHE
  > cecec2c go/ssa: add typeset iteration helper
  > 1501321 gopls/internal/analysis/modernize: fix bug in minmax
  > b31dda4 gopls/internal/analysis/modernize: fix bug in mapsloop
  > c1a7fcf go/analysis/passes/printf: extract operation parsing logic into tools/internal/fmtstr
  > 1b796a9 go/ssa: removing termList type
  > 6efe0f4 internal/astutil/cursor: Cursor.Ancestors iterator
  > df3de6a gopls: prepare for mod cache index
  > ae303ab gopls/internal/analysis/modernize: replace WithCancel with t.Cancel
  > 60643c0 go/types/typeutil: clarify what inGenericSig applies to
  > 248b94e go/ast/inspector: treat empty type filter like nil
  > 6016188 cmd: apply modernizers
  > f7fb515 internal/analysisinternal: check for interface recievers
  > b4e093e go/packages: run TestIssue70394 with Go 1.23
  > 16f2979 gopls/internal/analysis: unusedvariable
  > fc2161a internal/analysis/modernize: minmax: don't reduce to y:=min(x, y)
  > 155dc6e gopls/internal/settings: document why unusedvariable is off
  > ac8980c gopls/internal/protocol: modernize to use any
  > 2ad5c90 gopls/internal/settings: set severity=Info for modernizers
  > 7c7f353 gopls/internal/analysis/hostport: report net.Dial("%s:%d") addresses
  > 8179c75 internal/analysisinternal: factor useful helper functions
  > a339e37 gopls/internal/util/persistent: {Map,Set}: use iter.Seq2
  > a2408f8 internal/astutil/cursor: Cursor.Children: document invariants
  > ee69ea2 go/analysis/analysistest: avoid nil panic from an invalid token.Pos
bumping google.golang.org/api c642c84...d135e2f:
  > d135e2f chore(main): release 0.198.0 (# 2781)
  > c16dd63 feat(all): auto-regenerate discovery clients (# 2789)
  > d27a832 feat(all): auto-regenerate discovery clients (# 2788)
  > 82803c7 chore(all): update all (# 2785)
  > 65d7953 feat(all): auto-regenerate discovery clients (# 2786)
  > 786e8a8 feat(all): auto-regenerate discovery clients (# 2784)
  > 923816f feat(all): auto-regenerate discovery clients (# 2783)
  > 5a4dc60 feat(all): auto-regenerate discovery clients (# 2782)
  > 3c2f8ce feat(all): auto-regenerate discovery clients (# 2780)
  > c5990e2 chore(main): release 0.197.0 (# 2771)
  > dc3697a chore(all): update all (# 2777)
  > cedc5b0 feat(all): auto-regenerate discovery clients (# 2779)
  > 72cc5c4 feat(all): auto-regenerate discovery clients (# 2778)
  > cc62887 feat(all): auto-regenerate discovery clients (# 2776)
  > 11e2ff6 feat(all): auto-regenerate discovery clients (# 2775)
  > 6476ddd feat(all): auto-regenerate discovery clients (# 2774)
  > 140d0a5 fix(transport): set UniverseDomain in http.NewClient for new auth (# 2773)
  > 0c7c227 feat(all): auto-regenerate discovery clients (# 2772)
  > 07782e2 feat(all): auto-regenerate discovery clients (# 2770)
  > 6273efe chore(main): release 0.196.0 (# 2761)
  > 7714cd9 chore: bump some deps to latest (# 2769)
  > 2856eee chore(all): update all (# 2766)
  > 00da46b feat(all): auto-regenerate discovery clients (# 2768)
  > 6e81c8f feat(all): auto-regenerate discovery clients (# 2765)
  > d9ef5ce feat(all): auto-regenerate discovery clients (# 2764)
  > 293fdcd feat(all): auto-regenerate discovery clients (# 2763)
  > 21f10ed feat(all): auto-regenerate discovery clients (# 2760)
  > f9bde01 chore(main): release 0.195.0 (# 2751)
  > 04cbad8 feat(all): auto-regenerate discovery clients (# 2759)
  > e907e01 feat(all): auto-regenerate discovery clients (# 2756)
  > 47629a1 chore(all): update all to 4ba0660 (# 2754)
  > 3f3bd66 feat(all): auto-regenerate discovery clients (# 2755)
  > 70a68c2 feat(all): auto-regenerate discovery clients (# 2753)
  > 5b1ebe2 feat(all): auto-regenerate discovery clients (# 2752)
  > 6bdae51 feat(all): auto-regenerate discovery clients (# 2750)
  > cd95a34 chore(main): release 0.194.0 (# 2747)
  > eda6a59 fix(gen): change HttpBody.Data from string to any for monitoring:v1 (# 2744)
  > f836095 chore(all): Updating auth library version (# 2748)
  > 5d61f08 feat(all): auto-regenerate discovery clients (# 2746)
  > d994b67 chore(main): release 0.193.0 (# 2734)
  > 254bbe1 chore(all): update all (# 2740)
  > cb825c8 feat(all): auto-regenerate discovery clients (# 2742)
  > 9d915ff feat(all): auto-regenerate discovery clients (# 2739)
  > 7296c72 feat(all): auto-regenerate discovery clients (# 2738)
  > a2308c1 feat(all): auto-regenerate discovery clients (# 2737)
  > 6b81f1a feat(all): auto-regenerate discovery clients (# 2736)
  > c2b2ac9 chore: update to 1.21 (# 2735)
  > 4118ec2 feat(all): auto-regenerate discovery clients (# 2733)
  > c616f47 chore(main): release 0.192.0 (# 2726)
  > b457582 fix(internal/cba): Update credsNewAuth path to use nil oauth2 client (# 2731)
  > 2b4e9f4 feat: move storage, bigquery, and compute to new auth lib (# 2730)
  > a0ed1f3 feat(all): auto-regenerate discovery clients (# 2729)
  > 97c7f2e feat(all): auto-regenerate discovery clients (# 2728)
  > 36e3fa7 feat(all): auto-regenerate discovery clients (# 2727)
  > b2c7c05 feat(all): auto-regenerate discovery clients (# 2725)
  > d0759b0 chore(main): release 0.191.0 (# 2718)
  > 918e3d2 feat(all): auto-regenerate discovery clients (# 2724)
  > 0d15913 feat(all): auto-regenerate discovery clients (# 2722)
  > b365461 chore(all): update all (# 2721)
  > fffff7f fix: reference gax import in storage libs (# 2720)
  > a5ddb40 feat(all): auto-regenerate discovery clients (# 2719)
  > f5b0bb5 fix(transport): disable automatic universe domain check (# 2717)
  > 88dca19 chore(main): release 0.190.0 (# 2694)
  > 1f2d6d3 chore: bump cloud.google.com/go/[email protected] (# 2716)
  > 164a8d6 feat(all): auto-regenerate discovery clients (# 2715)
  > 05a4fc5 feat(all): auto-regenerate discovery clients (# 2706)
  > c8041b0 chore(all): update all (# 2702)
  > aa62c85 revert: move storage, bigquery, and compute to new auth lib (# 2695)" (# 2704)
  > 7b03cff feat(all): auto-regenerate discovery clients (# 2703)
  > a8b0821 feat(all): auto-regenerate discovery clients (# 2700)
  > 1e4c024 chore(all): update module github.com/google/s2a-go to v0.1.8 (# 2697)
  > d07fd26 feat(all): auto-regenerate discovery clients (# 2699)
  > ddc4e0b feat(all): auto-regenerate discovery clients (# 2698)
  > 66ace6c feat: move storage, bigquery, and compute to new auth lib (# 2695)
  > cbc19e7 feat(all): auto-regenerate discovery clients (# 2693)
  > d0089f3 chore(main): release 0.189.0 (# 2681)
  > af28112 chore: upgrade some dependencies (# 2692)
  > a94722f feat(all): auto-regenerate discovery clients (# 2691)
  > aa4662f fix(transport/grpc): retain UserAgent option with new auth stack (# 2690)
  > 786363b chore(all): update all (# 2688)
  > 27405af feat(all): auto-regenerate discovery clients (# 2687)
  > 611884d feat(all): auto-regenerate discovery clients (# 2685)
  > d925dcb fix(cba): Update newAuth path to use nil oauth2 client (# 2684)
  > 1e3757d feat(all): auto-regenerate discovery clients (# 2683)
  > eba243a chore: generate based on discovery-artifact-manager (# 2682)
  > 4a713f7 feat(all): auto-regenerate discovery clients (# 2680)
  > 9957790 chore(main): release 0.188.0 (# 2666)
  > 7021e3e chore: bump some deps (# 2679)
  > d17f6be feat(all): auto-regenerate discovery clients (# 2678)
  > 40b5113 fix: allow ForceSendFields to work for map types (# 2670)
  > 5cdcbe0 chore(all): update all (# 2676)
  > 5dd2fb2 feat(all): auto-regenerate discovery clients (# 2677)
  > a9177bd feat(all): auto-regenerate discovery clients (# 2675)
  > d465cec feat(all): auto-regenerate discovery clients (# 2674)
  > 88240e3 feat(all): auto-regenerate discovery clients (# 2673)
  > 0d54a85 feat(all): auto-regenerate discovery clients (# 2671)
  > 6df3749 feat(all): auto-regenerate discovery clients (# 2669)
  > 711eb91 fix: check []bytes > 0 instead of nil (# 2667)
  > e84fa65 feat(all): auto-regenerate discovery clients (# 2665)
  > b6c87f6 chore(main): release 0.187.0 (# 2656)
  > e051997 fix: pass through gRPC api key option to new auth lib (# 2664)
  > 2ea4e07 chore(all): update all to dc46fd2 (# 2662)
  > 6e061ce feat(all): auto-regenerate discovery clients (# 2663)
  > 0a238f5 feat(all): auto-regenerate discovery clients (# 2661)
  > 3ca2f84 feat(all): auto-regenerate discovery clients (# 2660)
  > 7cd88da feat(all): auto-regenerate discovery clients (# 2659)
  > a758bc1 fix(gensupport): wrap chunk upload err for retries (# 2657)
  > 719f988 feat(all): auto-regenerate discovery clients (# 2658)
  > 1a28e06 feat(all): auto-regenerate discovery clients (# 2655)
  > 89bc0dc chore(main): release 0.186.0 (# 2642)
  > 6c8b3b9 chore: bump auth lib dep (# 2654)
  > bc370a7 feat(all): auto-regenerate discovery clients (# 2653)
  > ddb2d15 chore(all): update module github.com/googleapis/gax-go/v2 to v2.12.5 (# 2651)
  > 10c47f3 feat(all): auto-regenerate discovery clients (# 2652)
  > 695484b feat(all): auto-regenerate discovery clients (# 2649)
  > 1bac79d feat(all): auto-regenerate discovery clients (# 2648)
  > c1a7681 feat(all): auto-regenerate discovery clients (# 2645)
  > 1fcd83d chore: add simple readme for generator (# 2633)
  > 20ffdd8 feat(all): auto-regenerate discovery clients (# 2644)
  > 72fb128 feat(all): auto-regenerate discovery clients (# 2641)
  > e732ee3 chore(main): release 0.185.0 (# 2635)
  > 0c868b2 feat(all): auto-regenerate discovery clients (# 2638)
  > 324ae13 chore(all): update all (# 2640)
  > 51ff8a4 feat(all): auto-regenerate discovery clients (# 2636)
  > ea513cb fix(internal/gensupport): update shouldRetry for GCS uploads (# 2634)
  > 66c2e4a chore(main): release 0.184.0 (# 2628)
  > 7fccba6 feat(all): auto-regenerate discovery clients (# 2624)
  > 953f728 fix(cba): Update credsNewAuth to support oauth2 over mTLS (# 2610)
  > ebc44d1 feat: support structpb.Struct as req/resp (# 2632)
  > 56d0d59 chore: remove some nil clients (# 2631)
  > e760319 chore(gensupport): merge x-goog-api-client vals into a single header (# 2612)
  > bec8b5c chore(all): update all (# 2630)
  > 643675b Revert "feat: regen cloudcommerceprocurement v1 from updated discovery file (…" (# 2629)
  > 7e30ed2 feat: regen cloudcommerceprocurement v1 from updated discovery file (# 2627)
  > 8a7c0e1 chore: bump auth dep (# 2621)
bumping golang.org/x/sys d4ac05d...863b3c4:
  > 863b3c4 unix: update glibc to 2.41
  > 4d4692e unix: add Auxv
  > b215a1c unix: update to Linux kernel 6.13
  > c756214 cpu: add support for AVX-VNNI and IFMA detection
  > 1c14dca unix: add GetPeerUcred and UcredGet for solaris
bumping google.golang.org/grpc b615b35...98a0092:
  > 98a0092 Change version to 1.70.0 (# 7984)
  > bf380de Cherrypick # 7998,  # 8011, # 8010 into 1.70.x (# 8028)
  > 54b3eb9 experimental/credentials: Add credentials that don't enforce ALPN (# 7980) (# 8012)
  > 62b9185 clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid data races (# 7991) (# 8004)
  > 724f450 examples/features/csm_observability: use helloworld client and server instead of echo client and server (# 7945)
  > e8d5feb rbac: add method name to :path in headers (# 7965)
  > e912015 cleanup: Fix usages of non-constant format strings (# 7959)
  > 681334a cleanup: replace dial with newclient (# 7943)
  > 063d352 internal/resolver: introduce a new resolver to handle target URI and proxy address resolution (# 7857)
  > 10c7e13 outlierdetection: Support health listener for ejection updates (# 7908)
  > bce0535 test: Add a test for decompression exceeding max receive message size (# 7938)
  > f32168c envconfig: enable xDS client fallback by default (# 7949)
  > e957825 test: Workaround slow SRV lookups in flaking test (# 7957)
  > e5a4eb0 deps: update crypto dependency to resolve CVE-2024-45337 (# 7956)
  > 56a14ba cleanup: replace dial with newclient (# 7920)
  > b3bdacb test: switching to stubserver in tests instead of testservice (# 7925)
  > e8055ea grpcs: update `WithContextDialer` documentation to include using passthrough resolver (# 7916)
  > d0716f9 examples/features/csm_observability: Make CSM Observability example server listen on an IPV4 address (# 7933)
  > cc161de xds: Add support for multiple addresses per endpoint (# 7858)
  > 3f76275 xdsclient: stop caching xdsChannels for potential reuse, after all references are released (# 7924)
  > 7ee073d experimental/stats: re-add type aliases for migration (# 7929)
  > 38a8b9a health, grpc: Deliver health service updates through the health listener (# 7900)
  > c1b6b37 Update README.md (# 7921)
  > e4d084a examples: replace printf with print for log message in gracefulstop (# 7917)
  > b1f70ce test: replace grpc.Dial with grpc.NewClient
  > 0027558 internal/transport: replace integer status codes with http constants (# 7910)
  > 66ba4b2 examples/features/gracefulstop: add example to demonstrate server graceful stop (# 7865)
  > adad26d test/kokoro: Add psm-fallback build config (# 7899)
  > f53724d serviceconfig: Return errors instead of skipping invalid retry policy config (# 7905)
  > 645aadf deps: update dependencies for all modules (# 7904)
  > d7286fb Change version to 1.70.0-dev (# 7903)
bumping google.golang.org/protobuf 259e665...f09e239:
  > f09e239 all: release v1.36.5
  > ab9efaa protogen: fix name mangling for fields with identical GoCamelCase
  > e677ef9 all: remove weak field support
  > 89b5638 all: start v1.36.4-devel
bumping github.com/google/go-containerregistry 1e09daa...c4dd792:
  > c4dd792 bump deps using hack/bump-deps.sh (# 2042)
  > 6bce25e Detect zstd in crane append (# 2023)
  > 06dcd85 mutate: Create a defensive annotations copy (# 2030)
  > a9a53a8 check for 406 status code when handling referrers endpoint response (# 2026)
  > 4630c40 don't pin chainguard-dev/actions  (# 2025)
  > 808e354 bump actions to latest (# 2011)
  > a07d1ca fix: redact.URL uses (*URL).Redacted to omit basic-auth password (# 1947)
  > 00f182b Expose compare package (# 2001)
  > b8e87ed remote/transport: Make bearer transport go-routine-safe (# 1806)
  > c195f15 deps: bump docker dep (# 1991)
  > c3d1dcc Create `remote.Push` (# 1978)
  > d36047a Restore blind-write to remote.Put (# 1970)
  > 9915a85 Referrer API must return correct Content-Type (# 1968)
  > 1b4e407 Add -O shorthand for --omit-digest-tags to crane. (# 1958)
  > 3764db2 Fix windows race condition when writing image with duplicate layers (# 1921)
  > 39d1148 Add Context support to auth methods (# 1949)
  > ff385a9 feat: mutate platform (# 1919)
  > 98dd3e9 Support podman auth file REGISTRY_AUTH_FILE. (# 1914)
  > 051d642 registry: Implement Range requests for blobs (# 1917)
  > 0309184 Add JSON marshalling funcs for Digest. (# 1915)
  > 8b3c303 Bump golang.org/x/ packages (# 1892)
  > afec664 Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain (# 1815)
  > 8dadbe7 Work around docker v25 tarballs (# 1872)
  > a0658aa Always print pushed digest in crane push (# 1860)
  > 55ffb00 fix: goreleaser config (# 1764)
  > 4fdaa32 feat: allow port and disk path to be overriden (# 1848)
  > ceb0580 feat: implement gc command (# 1811)
  > 5a53a12 tag: add command explanation to the long help (# 1843)
  > c722ce9 fix: mimic oci-layout (# 1810)
  > b2485cb Build releases with Go 1.21 (# 1840)
  > dbcd01c Don't wrap DefaultKeychain with refreshes (# 1791)
  > a748190 Set Content-Length for blob uploads (# 1781)
  > 190ad0e Validate index architectures match children (# 1776)
  > a54d642 fix: pin to goreleaser v1.18 to unblock release (# 1763)
  > ea19b57 Return OCI Index content-type for referrers response (# 1762)
  > b850480 Drop localhost to support crane registry serve in a container (# 1746)
  > fe268b7 Don't try cross-origin mounting against dockerhub (# 1743)
  > 2472cbb Let the filesystem handle atomicity (# 1735)
  > db818dc Use RWLock, limit scope of locking, write digest first (# 1734)
  > 44a6e2e Allow concurrent blob Sets, use RWMutex (# 1733)
  > 9010ce1 Correct crane registry help text (# 1732)
  > 03ad2ac add --blobs-to-disk to 'crane registry serve' (# 1731)
  > 4e4b03a Don't load into daemon if the image already exists (# 1724)
  > 6de8d1d Change ErrSchema1 error to dynamic strings. (# 1721)
  > 0a9bb12 crane: Respect cmd.OutOrStdout (# 1728)
  > 145eebe Add missing name option in crane index commands (# 1723)
  > 037ab31 Surface better error messages in crane index (# 1722)
  > 03b8657 fix: add bounds checking to addendum layer mutations to prevent panic (# 1715)
  > c3f8a49 Pass scopes through crane auth token (# 1713)
  > 53fbcf9 Bump codecov/codecov-action from 3.1.3 to 3.1.4 (# 1710)
  > 1d535e2 Add crane auth token (# 1709)
  > 5fe7f2e Limit size of manifest (# 1711)
  > e61c519 retry HTTP 522 errors by default (# 1707)
  > 2015ceb fixed a goroutine leak (# 1705)
  > 0ec36ad Allow crane to export schema 1 images (# 1704)
  > b7ad3f1 bump deps using ./hack/bump-deps.sh (# 1702)
  > dbecb1d Do not reuse pushers for pullers (# 1701)
  > a927d7c Make 403 non-fatal for manifest existence checks (# 1691)
  > 0b12f56 Add ppc64le to all binaries (# 1688)
  > 69d1a19 Add `mutate` `--ports` option to set the exposed ports (# 1677)
  > 691004b bump deps using ./hack/bump-deps.sh (# 1685)
  > 370e8a5 Fix a few lint issues (# 1684)
  > 3120ba5 Keep order of env in crane mutate (# 1683)
  > afd15f1 Add --all-tags flag to crane cp (# 1682)
  > 5438948 add registry.Repo("foo") (# 1671)
  > 43710a9 Retry without mount if auth fails (# 1681)
  > 3228a60 Add ppc64le to .goreleaser.yml (# 1680)
  > d64f9e0 remove time from random.Image history (# 1678)
  > 3706061 allow pkg/v1/random to accept a RNG source (# 1675)
  > b7c6e9d Fall back to puller if reusing pusher fails (# 1676)
  > 005bb71 Add remote.Reuse for Pusher/Puller (# 1672)
  > 58bd35b Bump codecov/codecov-action from 3.1.2 to 3.1.3 (# 1668)
  > ad695c0 Replace deprecated command with environment file (# 1667)
  > 07c767c Add remote.Puller (# 1644)
  > 9f68710 feat(daemon): generate config file from Docker Engine API (# 1130)
  > d1c4e9f verify provenance (# 1611)
  > df518f9 add crane auth logout (# 1589)
  > 52d59d1 feat(remote): make retryStatusCodes configurable (# 1635)
  > df72a9a crane push: print pushed ref@digest to stdout (# 1663)
  > 27a6ad6 Revert "authn: Add NewConfigKeychain to load a config from explicit path (# 1603)" (# 1664)
  > 217318c deprecate estargz (# 1660)
  > 1cb7e13 authn: Add NewConfigKeychain to load a config from explicit path (# 1603)
  > 348cd86 bump deps using ./hack/bump-deps.sh (# 1659)
  > e055961 Bump peter-evans/create-pull-request from 4 to 5 (# 1642)
  > 6f96bba gcrane: Use page size of 10,000 for googley things (# 1645)
  > 375fb61 Bump slsa-framework/slsa-verifier from 2.1.0 to 2.2.0 (# 1649)
  > 07eb440 Bump codecov/codecov-action from 3.1.1 to 3.1.2 (# 1650)
  > 9aa45a1 Change return type of remote.Referrers (# 1652)
  > bc990d6 Fix fetching referrers error handling (# 1648)
  > ed5c185 Retry net.ErrClosed (# 1637)
  > 2435320 Revert "Cleanup: Switch the debug image to `cgr.dev/chainguard/busybox` (# 1638)" (# 1641)
  > 2ccd41c Cleanup: Switch the debug image to `cgr.dev/chainguard/busybox` (# 1638)
  > 6743ec9 Implement remote.Pusher (# 1633)
  > 0962e29 Allow remote config layers to be lazy fetched (# 1634)
  > 4a79e94 Fix race in stream (# 1632)
  > 65e78dc Add partial.Manifests for lazy index access (# 1631)
  > 0577676 crane: ignore buildx attestations in flatten (# 1630)
  > 93be9c4 Don't export whiteouts for single layers (# 1629)
  > d958444 Add remote.Descriptor.Schema1() (# 1626)
  > aee00b1 Fix race in mutate (# 1627)
  > 6ac92e8 Refactor fetcher, writer, and progress (# 1625)
  > 249d7e1 Refresh authn.DefaultKeychain creds every 5 min (# 1624)
  > b8d1c0a Bump slsa-framework/slsa-verifier from 2.0.1 to 2.1.0 (# 1621)
  > ace7be7 update GCR quotas (# 1619)
  > e2620e5 Actually retry retryable status codes (# 1618)
  > 21ac1b2 Adding `mutate` `--workdir` option to set the working directory (# 1615)
  > 54e3f49 Bump actions/stale from 7 to 8 (# 1616)
  > a34235c Support `Warning` header aggregation and reporting in `crane` (# 1604)
  > 46488f7 retry HTTP 499 errors by default (# 1612)
  > 0f2db49 release: use ko 0.13.0 to build images (# 1607)
  > 53189d3 Bump actions/setup-go from 3 to 4 (# 1602)
  > 01bbd53 Update release.yml (# 1601)
  > 4b081f8 Avoid v1.Manifest in crane edit config (# 1583)
  > 1cfe1fc Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (# 1593)
  > e94d408 bump deps using ./hack/bump-deps.sh (# 1592)
  > ff810c1 crane: add serve subcommand (# 1586)
  > 57f010d replace manual slsa-verifier installation with action (# 1585)
  > 6770304 Update descriptor "data" field (when valid) during "crane edit config" (# 1584)
  > 1b8dc2b Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (# 1580)
  > 8ea5e0e crane: support --omit-digest-tags in crane ls (# 1528)
  > 4e95ae2 crane: add --flatten for index append (# 1566)
  > 4a0e0af docs: Update crane installation and verification instructions (# 1567)
  > 3624968 tarball: pass imageToTags (# 1563)
  > 9f42e02 Set mediaType for empty.ImageIndex in RawManifest (# 1562)
  > 2ceebaa Implement crane index subcommand (# 1561)
  > 9cd098e skip tls verification if default transport is used with insecure option (# 1559)
  > eb7d746 authn: also read mount secrets (# 1560)
  > 62f183e Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (# 1556)
  > b3c23b4 Support for OCI 1.1+ referrers via API (# 1546)
  > de35f0f Allow setting Content-Type in crane edit manifest (# 1551)
  > e04520b fix: Fix the crane release url and add more steps (# 1532)
  > 824efc7 fix(mutate): also set timestamps only present in some formats (# 1550)
  > 061ee6b Support for OCI 1.1+ referrers via fallback tag (# 1543)
  > da1008f Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (# 1548)
  > 86be45f Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (# 1547)
  > 9306eba Allow crane edit to generate non-image artifacts (# 1545)
  > 759b19f Support artifactType, for images whose config.mediaType is not a config (# 1541)
  > 11843ba Enforce proper sha256 usage (# 1544)
  > 76bac93 Update release.yml (# 1540)
  > d872232 hash: use generic instantiation (# 1538)

Signed-off-by: Knative Automation <[email protected]>

Author: knative-automation

go.mod

@@ -4,17 +4,17 @@ go 1.23.0
 
 require (
 	github.com/emicklei/go-restful v2.9.5+incompatible
-	github.com/golang-jwt/jwt/v4 v4.5.0
+	github.com/golang-jwt/jwt/v4 v4.5.1
 	github.com/hashicorp/golang-lru v1.0.2
 	github.com/kelseyhightower/envconfig v1.4.0
 	github.com/zeebo/xxh3 v1.0.2
 	go.uber.org/zap v1.27.0
-	k8s.io/api v0.32.1
-	k8s.io/apimachinery v0.32.1
-	k8s.io/client-go v0.32.1
-	knative.dev/hack v0.0.0-20250116150306-c142b4835bc5
-	knative.dev/pkg v0.0.0-20250117084104-c43477f0052b
-	knative.dev/serving v0.43.1-0.20250120145709-df7f1681a4e9
+	k8s.io/api v0.32.2
+	k8s.io/apimachinery v0.32.2
+	k8s.io/client-go v0.32.2
+	knative.dev/hack v0.0.0-20250219013704-306ce745e077
+	knative.dev/pkg v0.0.0-20250226145529-0372c089c78f
+	knative.dev/serving v0.44.1-0.20250303133614-e067066fc44f
 )
 
 require (
@@ -27,7 +27,7 @@ require (
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
-	github.com/evanphx/json-patch/v5 v5.9.0 // indirect
+	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
 	github.com/go-kit/log v0.2.1 // indirect
 	github.com/go-logfmt/logfmt v0.5.1 // indirect
@@ -39,14 +39,15 @@ require (
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/gnostic-models v0.6.9 // indirect
-	github.com/google/go-cmp v0.6.0 // indirect
-	github.com/google/go-containerregistry v0.13.0 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/google/go-containerregistry v0.20.3 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/websocket v1.5.3 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.21.0 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/klauspost/compress v1.17.11 // indirect
 	github.com/klauspost/cpuid/v2 v2.0.9 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
@@ -55,43 +56,42 @@ require (
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/openzipkin/zipkin-go v0.4.3 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.19.1 // indirect
+	github.com/prometheus/client_golang v1.20.5 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.55.0 // indirect
+	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/prometheus/statsd_exporter v0.23.0 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.opencensus.io v0.24.0 // indirect
 	go.uber.org/automaxprocs v1.6.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/mod v0.22.0 // indirect
-	golang.org/x/net v0.34.0 // indirect
-	golang.org/x/oauth2 v0.23.0 // indirect
-	golang.org/x/sync v0.10.0 // indirect
-	golang.org/x/sys v0.29.0 // indirect
-	golang.org/x/term v0.28.0 // indirect
-	golang.org/x/text v0.21.0 // indirect
-	golang.org/x/time v0.7.0 // indirect
-	golang.org/x/tools v0.29.0 // indirect
+	golang.org/x/mod v0.23.0 // indirect
+	golang.org/x/net v0.35.0 // indirect
+	golang.org/x/oauth2 v0.26.0 // indirect
+	golang.org/x/sync v0.11.0 // indirect
+	golang.org/x/sys v0.30.0 // indirect
+	golang.org/x/term v0.29.0 // indirect
+	golang.org/x/text v0.22.0 // indirect
+	golang.org/x/time v0.10.0 // indirect
+	golang.org/x/tools v0.30.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
-	google.golang.org/api v0.183.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
-	google.golang.org/grpc v1.69.2 // indirect
-	google.golang.org/protobuf v1.36.4 // indirect
+	google.golang.org/api v0.198.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20250207221924-e9438ea467c6 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250207221924-e9438ea467c6 // indirect
+	google.golang.org/grpc v1.70.0 // indirect
+	google.golang.org/protobuf v1.36.5 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/code-generator v0.32.1 // indirect
-	k8s.io/gengo v0.0.0-20250130153323-76c5745d3511 // indirect
+	k8s.io/code-generator v0.32.2 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250130153323-76c5745d3511 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7 // indirect
-	k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 // indirect
-	knative.dev/networking v0.0.0-20250117155906-67d1c274ba6a // indirect
-	sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
+	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
+	knative.dev/networking v0.0.0-20250226145929-863b7af736fb // indirect
+	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )