chore: update go packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/hashicorp/terraform-plugin-framework-timeouts	v0.4.1 -> v0.5.0
github.com/hashicorp/terraform-plugin-go	v0.25.0 -> v0.26.0
github.com/hashicorp/terraform-plugin-sdk/v2	v2.35.0 -> v2.36.0
github.com/siderolabs/image-factory	v0.6.6 -> v0.6.7
github.com/siderolabs/talos	v1.10.0-alpha.0.0.20250120132938-e1efbf656ae9 -> v1.10.0-alpha.1
github.com/siderolabs/talos/pkg/machinery	v1.10.0-alpha.0.0.20250120132938-e1efbf656ae9 -> v1.10.0-alpha.1
golang.org/x/mod	v0.22.0 -> v0.23.0
google.golang.org/grpc	v1.69.2 -> v1.70.0
google.golang.org/grpc	v1.66.3 -> v1.70.0

---

Release Notes

hashicorp/terraform-plugin-framework-timeouts (github.com/hashicorp/terraform-plugin-framework-timeouts)

v0.5.0

Compare Source

NOTES:

• all: This Go module has been updated to Go 1.22 per the Go support policy. It is recommended to review the Go 1.22 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#​143)

FEATURES:

• ephemeral/timeouts: Adds functions and types for ephemeral resource timeouts (#​157)

hashicorp/terraform-plugin-go (github.com/hashicorp/terraform-plugin-go)

v0.26.0

Compare Source

BREAKING CHANGES:

• tfprotov5+tfprotov6: EphemeralResourceServer interface is now required in ProviderServer. Implementations not needing ephemeral resource support can return errors from the *EphemeralResource methods. (#​442)
• tfprotov5+tfprotov6: Removed temporary ProviderServerWithEphemeralResources interface type. Use EphemeralResourceServer instead. (#​442)

NOTES:

• all: To prevent compilation errors, ensure your Go module is updated to at least [email protected], [email protected], terraform-plugin-sdk/v2@​v2.35.0, and [email protected] before upgrading this dependency. (#​442)

FEATURES:

• tfprotov5+tfprotov6: Upgraded protocols and added types to support write-only attributes (#​462)

hashicorp/terraform-plugin-sdk (github.com/hashicorp/terraform-plugin-sdk/v2)

v2.36.0

Compare Source

NOTES:

• Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#​1375)

FEATURES:

• helper/schema: Added WriteOnly schema behavior for managed resource schemas to indicate a write-only attribute. Write-only attribute values are not saved to the Terraform plan or state artifacts. (#​1375)
• helper/validation: Added PreferWriteOnlyAttribute() validator that warns practitioners when a write-only version of a configured attribute is available. (#​1375)
• schema/resource: Added ValidateRawResourceConfigFuncs field which allows resources to define validation logic during the ValidateResourceTypeConfig RPC. (#​1375)

siderolabs/image-factory (github.com/siderolabs/image-factory)

v0.6.7

Compare Source

image-factory 0.6.7 (2025-02-03)

Welcome to the v0.6.7 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Dmitry Sharshakov
• Justin Garrison
• Nico Berlee
• Utku Ozdemir
• Alessio Moiso
• Alexis La Goutte
• Andrew Symington
• Christian Luetke-Stetzkamp
• Christoph Hoopmann
• Florian Grignon
• Ganawa Juanah
• Jasmin
• Jason Benedicic
• K Birt
• KillianCdP
• Louis SCHNEIDER
• Luke Milby
• Marcel Hamer
• Matt Willsher
• Mohammad Amin Mokhtari
• Motte
• Natalie Romana Albers
• OliviaBarrington
• PRIHLOP
• Ram
• Roman Ivanov
• Rémi Paulmier
• Sam Stelfox
• Sergey Melnik
• SpiReCZ
• Tim Olson
• Tine Jozelj
• TomyLobo
• Variant9
• bzub
• egrosdou01
• greenpsi
• sflotat2607
• sophia-coldren
• suse-coder

Changes

22 commits

• c6e3fa6 release(v0.6.7): prepare release
• f896663 feat: update Talos to v1.10.0-alpha.1
• 0931477 release(v0.6.6): prepare release
• b80192a feat: refactor platform metadata
• 4bb43ef fix: add imgfree to ipxe boot script
• d5f3f5a feat: update for Talos 1.10 current
• e727003 chore: update go-uefi module
• 3b302c6 feat: set secure boot support for nocloud platform
• a4932a2 chore: reduce memory usage
• 1729190 chore: support gcr.io keychain for registry auth
• 1389813 release(v0.6.4): prepare release
• b7c7c16 fix: secureboot pxe
• 67eb663 release(v0.6.3): prepare release
• 46f4104 feat: update to Talos 1.9.0-beta.1
• cbf8cc9 feat: add Turing RK1 as option
• d0dcfe5 release(v0.6.2): prepare release
• a8cdc21 feat: update dependencies for Talos 1.9
• b7f7fd3 chore: add hash errata for tarball headers
• 370c137 fix: vmware build assets on non-amd64
• c102c95 chore: alias i915/amdgpu extensions to new name
• b7b4c71 release(v0.6.1): prepare release
• 96c8455 chore: bump generated data

Changes since v0.6.6

2 commits

• c6e3fa6 release(v0.6.7): prepare release
• f896663 feat: update Talos to v1.10.0-alpha.1

Changes from siderolabs/gen

1 commit

• 5ae3afe chore: update hashtriemap implementation from the latest upstream

Changes from siderolabs/talos

240 commits

• e2aa7c98c fix: installer with SecureBoot should contain UKIs
• 6e22c06c3 release(v1.10.0-alpha.1): prepare release
• 3a2d9867b fix: do not close client.Client.conn with finalizer
• 73f30ff25 feat: bump pkgs for udev update
• aea90cb8f docs: update hyper-v
• b7165615f fix: use local NTP for AWS platform
• 673ca4bcb fix: ensure proper closure of client.Client.conn with finalizer
• 19040ffd6 fix: handle of PE sections with duplicate names
• 83489d348 docs: add note about vmxnet and flannel conflict
• f1292f5e7 docs: add iscsi-tools extension to prerequisites
• 93b4a3740 test: bump timeout on rotate CA test
• 42e166984 feat: support kexec from uki
• 8da264946 docs: add Orange Pi 5 to Image Factory platforms and documentation
• c5fb62e2e feat: update Linux to 6.2.11
• 83d007c16 feat: update etcd to 3.5.18
• edf7c3288 fix: pe uki extract
• 70f72c5b0 docs: update multus.md
• 807a3cd29 refactor: all network merge controllers
• ec8c4660e docs: update vmware.md
• baf81cd49 fix(ci): k8s integration suite wait for resource
• cd5e54903 feat: generate iso's with both UKI and grub
• 75673b6a3 feat: provide stable symlinks in disk resources
• f407c88e4 fix(ci): wait for longhorn node resource
• 601cdccb9 feat: extract kernel/initrd from uki for grub
• ff175b9fb docs: update disk-encryption.md
• a8d84e315 docs: fix typos and add more explanations in docs
• 3a384240e fix: invalid date field in iqn/nqn
• 82c9ec158 chore(ci): add tests with longhorn v2 engine
• 689ea1dbf fix: bring back disk UUID
• 7a712fad2 fix: disks with 4k sector size and systemd-boot
• d62a34aaf feat: update tools/pkgs/extras
• b9a8ad6ac chore: de-hardcode list of extra images for image-cache test
• 683153a33 docs: remove the last mentions of preserve flag for Talos 1.8+
• 33c7f4195 docs: fix typo an MacOS to on MacOS
• 21cff3919 chore(ci): fio benchmark results as separate artifacts
• 0b7fc7cdf fix: abort node watch on hostname change
• 99ba53941 docs: remove the mention of preserve flag for Talos 1.8+
• bde516fde chore(ci): rework iscsi-tools extensions test
• e1efbf656 refactor: extract platform metadata into Talos machinery
• 79987c05d feat: generate iqn and nqn files
• 0cab6ed17 docs: update troubleshooting.md
• 921e10254 chore: update Go to 1.23.5
• 399d53b54 fix: ignore forbidden error when waiting for pod eviction
• 8dea57a81 fix: make etc binds read-only
• 63157dcb4 docs: update SideroLinkConfig example
• fc7080e34 chore: clear cache after updating upstreams
• 51e0f273f docs: update documentation for Talos 1.9.2
• e06b14112 feat: update Kubernetes to 1.32.1
• 4310b290d fix: generate UKI only if actually needed
• a8cd99102 docs: update OpenEBS Mayastor installation
• cf45f4764 docs: add Radxa ROCK 5B docs to Single Board Computer section
• b21bdc5e5 chore(ci): save csi tests fio results
• 01c86832c chore(ci): add test for OpenEBS MayaStor
• c77483510 test: update talosctl debug air-gapped
• ddd695d93 feat: update containerd to 2.0.2
• da2e81120 fix: add informer resync period for node status watcher
• 9b957df64 chore: uki code restructure
• e41a99525 fix: kube-apiserver authorizers order
• db4ca5668 feat: add a kernel parameter to disable built-in auditd
• faa149003 feat: update Linux to 6.12.9
• 8de19758d fix: a couple of imager panics/crashes
• 5bc3e34cb fix: detect GPT before ZFS
• ed7e47d15 refactor: drop usage of objcopy to generate UKIs
• edf5c5e29 fix: extfs repair and resize
• 6e32ea5b7 fix: merge of VolumeConfig documents with sizes
• 1be5f8ff2 feat: update Linux to 6.12.8
• e6a4583ba feat: support generating unsigned UKIs
• bbd6067d4 fix: partition alignment on disks with 4k sectors
• 84fcc976f fix: yet another dashboard panic
• 6d605fc85 fix: disable NRI plugin in a different way
• 499695e24 fix: request previous IP address in discovery
• cc84caf8c docs: update Cilium documentation
• fa5300d91 chore: revert: drop deprecated allowSchedulingOnMasters
• 0abb3dabf docs: fix command to wait for ceph-rook HEALTH_OK
• 32c67c27c chore: drop deprecated allowSchedulingOnMasters
• ae6d065be fix: mount selinuxfs only when SELinux is enabled
• 5ccbf4bcd feat: enable configfs
• 59582496d feat: bring in partity with sd-257
• 83d84a831 chore(ci): better zfs checks
• 650eb3a4f refactor: rewrite cloud uploader to use AWS SDK Go v2
• 01bf8449b fix: update field name for bus path disk selector
• e915c98d5 fix: exclude disks with empty transport for disk selector
• b7a7fdc4b refactor: generate /etc/os-release file static way
• e79c9e127 chore(ci): drop equinix metal e2e-test
• 418945444 fix: build of talosctl on non-Linux platforms
• 4761a9e6a chore: update dependencies
• f98efb333 fix: ignore member not found error on leave cluster
• b72bda0a4 fix: talosctl support and race tests
• 27233cf0f test: use node informer instead of raw watch
• 5dc15e8db fix: update go-blockdevice to v2.0.9
• 5f3acd0f2 fix: use correct default search domain
• 7e5d36d46 fix: pci driver rebind config validation
• 4b97bbc3f fix: pull in containerd CNI deadlock fix
• 066480722 test: fix apparmor tests
• 82ea44a6b fix: reduce installer image
• 78b3e7f4f fix: get next rule number for IPv6 in the appropriate chain
• 675854aa0 docs: fix two typos
• f70b7386a test: add a xfs makefs test
• 8212e4864 refactor: use quirks in kernel args
• b4aa5189d release(v1.10.0-alpha.0): prepare release
• bd85bd5b7 fix: fix Failed to initialize SELinux labeling handle udev error
• 73c82e3e5 feat: bring Linux 6.12.6, CNI plugins 1.6.1
• c12b52491 docs: document Kubernetes service registry incompat with K8s 1.32
• a5660ed77 feat: pcirebind controller
• 4c3261626 docs: fix several typos
• fb3675321 fix: dashboard crash on CPU data
• dec0185c8 chore: reduce memory usage for secureboot functions
• cee6c60a0 fix: make talosctl time work with PTP time sync
• f75604313 chore: support gcr.io auth for cache and image gen
• 6ef2596da docs: improve Hetzner documentation
• 7d39b9ec2 feat: remove cgroupsv1 in non-container mode
• 8003536c7 fix: restore previous disk serial fetching
• 03116ef9b chore: prepare for Talos 1.10
• 00682fdd6 docs: activate 1.9 docs as default
• bea05f5c9 docs: update deploying-cilium.md
• 284ab1179 feat: support link altnames/aliases
• 5bfd829bf docs: fix 'containter' typo
• 8d151b771 docs: clarify TALOSCONFIG for AWS
• 0ef19171f fix: renovate typo
• c568adc7d fix: renovate config
• ec2e24fd9 fix: match MAC addresses case-insensitive (nocloud)
• 41a0c440a chore: rekres for renovate changes
• a49bb9ee4 feat: update Linux to 6.12.5
• b15917ecc chore: add more debugging logs for META and volumes
• 2b1b326f0 docs: mention different paths for OpenEBS
• 9470e842f test: cleanup failed Kubernetes pods
• c9c685150 fix: node identity flip
• 590c01657 feat: update containerd to v2.0.1
• 18fa5a258 docs: update image-cache doc for iso
• ab5bb6884 fix: generate and serve registries with port
• 58236066d fix: support image cache on VFAT USB stick
• e193a5071 fix: image cache integration test
• 08ee400fd test: fix flaky test NodeAddressSort
• d45e8d1d1 feat: update Kubernetes to 1.32.0
• 136b12912 chore: drop semicolon for supporting vfat filesystems
• 3e9e027ef test: add an option to boot from an USB stick
• ef8c3e3b3 docs: fix typo in multus.md
• d54414add fix: authorization config gen
• cce72cfe8 docs: replace deprecated Hetzner server plans
• 81805103d chore: enable proper parallel usage of TestDepth
• e1b824eba docs: update ceph-with-rook.md
• 470b75563 fix: use mtu network option for podman
• 61b1489a0 fix: order volume config by the requested size
• bc3039acd feat: update runc to 1.2.3
• 30016a0a8 fix: avoid nil-pointer-panic in RegistriesConfigController
• fe0457152 fix: power on the machine on reboot request in qemu power api
• 10da553ef docs: build what's new for 1.9
• d946ccae3 feat: update Linux to 6.12.4
• 707a77bf6 test: fix user namespace test, TPM2 fixes
• c3537b2f5 feat: update Linux to 6.12.3
• cb4d9d673 docs: fix a few mistakes in release notes
• c4724fc97 chore: add integration tests for image-cache
• 07220fe7f fix: install iptables-nft to the host
• 14841750b chore: add version compatibility for Talos 1.10
• 852baf819 feat: support vlan/bond in v1, vlan in v2 for nocloud
• dd61ad861 fix: lock provisioning order of user disk partitions
• d0773ff09 chore: update Go to 1.23.4
• 7d6507189 feat: implement new address sorting algorithm
• 9081506d6 feat: add process scheduling options
• 77e9db4ab test: use two workers in qemu tests by default
• 5a4bdf62a feat: update Kubernetes to 1.32.0-rc.1
• d99bcc950 chore: refactor mergeDNSServers func
• 0cde08d8b docs: add Turing RK1 docs to Single Board Computer section
• ff13ccc5b docs: update the Cilium CNI deployment
• 191825a44 docs: update install-kubevirt.md
• 770be1642 feat: support image cache copying
• 8fb567dd1 docs: fix typo in virtualbox docs
• 60e4561b4 feat: add support for custom search domains
• 95c695880 fix: don't reset health status if service doesn't support health checks
• b7609edd1 chore: update pkgs/extras to final 1.9.0 tags
• c7b25430b fix: multiple small fixes for service runners
• e33d2f581 feat: support overriding base OCI spec for CRI
• 347b75846 chore: support saving cluster logs on destroy
• c254f261f fix: do not extract xattrs in unsquashfs
• fc3b31575 fix: multiple issues with opening encrypted volumes
• 145b02642 chore: deprecate cgroupsv1 in non-container mode
• 581c0851d feat: update dependencies
• e9058461e feat: add api-server authorization config
• db1c70768 chore: move enabling SELinux by default to 1.10
• ef69c9d39 feat: update Linux to 6.12.1
• ccc5a8d34 chore: split config.Registry into the separate resource
• c735d1492 fix: wait for udevd before starting sync
• bef4d5150 fix: make system_disk condition work properly before install
• af91c99ba chore: update image cache config
• e10e90b05 fix: nocloud network link matching on MAC addresses
• 2a9130a2e fix: make Talos META partition match more precise
• 9adaf7f01 docs: update local-storage.md
• 7e19d5c4c docs: add kubevirt install
• f1d1628c8 fix: properly halt installation if Talos already installed
• 177df62a0 fix: small logrus fixes
• a9875b770 fix: return proper number from the timeStampWriter
• e8a262490 fix: systemd-udevd restore old naming behavior
• 939c555f9 fix: imager disk image-cache generator
• 1bac0b183 feat: support generating disk images with image cache
• 84459d902 fix: make immage cache config apply immediately
• 56e1ee72e release(v1.9.0-alpha.3): prepare release
• af5d6b8c4 fix: show SELinux labels on pseudo-fs
• f46922fa9 chore: fix dockerfile warnings
• a13f82c59 feat: udev: label device nodes
• e899fb37f feat: label created files in /etc
• 5f68c17ed feat: implement image cache configuration
• 0ffb2187a feat: registry proxy
• 77cf84fb5 feat: support generating iso with imagecache
• 5de6275b8 chore: image cache generator improvements
• 1a8cc5f8b feat: add SELinux labels to volumes
• 61b9129e0 fix: add directory entries and filemode to tarball
• 4caeae21e refactor: optimize flags and SetLabel
• 6074a870a feat: add e2fsprogs to talos rootfs
• 7ffcf5b93 docs: update getting started
• c4c1a0d7c fix: make vmware platform common code build on all arches
• cc768037f feat: implement block device wipe
• 6fb518ae5 fix: don't activate LVM volumes in agent mode
• 0e3ed3072 fix: no longer leak Close reader
• 4dc58cfdf chore: small fixes
• f400ae911 fix: small fixes for image cache generation
• 93754b7de fix: config and platform manifest generation
• 95b2fc946 feat: image cache gen
• e4c6186c6 chore: remove i915/amdgpu drivers
• 744ad12a6 docs: update replicated-local-storage-with-openebs.md
• fd713e451 feat: add permanent hardware addr to device selectors
• d55a96e8c refactor: remove SELinux client_u and client_r
• 3a5b55fd2 fix: allow CEL expressions config merge
• f1b15f580 chore: remove replace for safchain/ethtool
• f9697a9a0 fix: register controlplane node with NoSchedule taint
• 30f8b5a9f fix: registry mirror fallback handling
• 0f41e7743 feat: allow for onlink directive (nocloud)
• e26d0043e chore: code cleanup
• 43fe3807a feat: implement tracking of blockdevice secondaries
• 8a7476c3a fix: install on non-empty disk
• 8b4253d18 feat: update etcd to v3.5.17
• 5a0fd5b88 refactor: move early initialization functions to pre-initialize phase
• 9916e2cd8 chore: update pkgs/tools/extras for Go 1.23.3
• 20bbf0235 docs: update vultr documentation
• aea98940b fix: arch linux search paths and names for QEMU provisioner
• 682718d4c fix: use imager incoming version for extension validation
• 9a02ecc49 feat: rewrite install disk selector to use CEL expressions
• eba35f441 docs: add note about PSP in Rook-Ceph guide
• 38b80fb1d docs: add missing --talosconfig parameter to end of Hetzner guide
• a07f66c91 docs: gcp: fix controlplane nodes tags
• 4fe6dc8a0 chore: clean dns code

Dependency Changes

• github.com/google/go-containerregistry v0.20.2 -> v0.20.3
• github.com/siderolabs/gen v0.7.0 -> v0.8.0
• github.com/siderolabs/talos v1.9.0-alpha.2 -> e2aa7c9
• github.com/siderolabs/talos/pkg/machinery 8b4253d -> e2aa7c9
• github.com/sigstore/cosign/v2 v2.4.0 -> v2.4.1
• github.com/sigstore/sigstore v1.8.8 -> v1.8.12
• github.com/slok/go-http-metrics v0.12.0 -> v0.13.0
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• golang.org/x/net v0.30.0 -> v0.34.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.29.0

Previous release can be found at v0.6.0

siderolabs/talos (github.com/siderolabs/talos)

v1.10.0-alpha.1

Compare Source

Talos 1.10.0-alpha.1 (2025-01-31)

Welcome to the v1.10.0-alpha.1 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

auditd

Kernel parameter talos.auditd.disabled=1 can be used to disable Talos built-in auditd service.

cgroups v1

Talos Linux no longer supports cgroupsv1 when running in non-container mode.
The kernel argument talos.unified_cgroup_hierarchy is now ignored.

Driver Rebind

Talos 1.10 now supports a new machine config document named PCIDriverRebindConfig that allows rebinding the driver of a PCI device to a different target driver.
See the documentation for more information.

iSCSI Initiator

Talos now generates /etc/iscsi/initiatorname.iscsi file based on the node identity which is tied to the lifecycle of the node.
If using iscsi-tools extension, starting with Talos 1.10 would have a more deterministic IQN for the initiator node.
Make sure to update any iSCSI targets to use the new initiator IQN.

The iqn can be read by talosctl read /etc/iscsi/initiatorname.iscsi

ISO

Talos starting with 1.10 will have ISO's that will use GRUB only for legacy BIOS and systemd-boot for modern UEFI systems.

kube-apiserver Authorization Config

When using .cluster.apiServer.authorizationConfig the user provided order for the authorizers is honoured and Node and RBAC authorizers are always added to the end if not explicitly specified.

Eg: If user provides only Webhook authorizer, the final order will be Webhook, Node, RBAC.

To provide a specific order for Node or RBAC explicitly, user can provide the authorizer in the order they want.

Eg:

cluster:
  apiServer:
    authorizationConfig:
      - type: Node
        name: Node
      - type: Webhook
        name: Webhook
        webhook:
          connectionInfo:
            type: InClusterConfig
        ...
      - type: RBAC
        name: rbac

Usage of authorization-mode CLI argument will not support this form of customization.

NVMe NQN

Talos now generates /etc/nvme/hostnqn and /etc/nvme/hostid files based on the node identity which is tied to the lifecycle of the node.

The NQN can be read by talosctl read /etc/nvme/hostnqn

Component Updates

• Linux: 6.12.11
• CNI plugins: 1.6.2
• runc: 1.2.4
• containerd: 2.0.2
• etcd: 3.5.18

Talos is built with Go 1.23.5.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Dmitry Sharshakov
• Justin Garrison
• Nico Berlee
• Skyler Mäntysaari
• Utku Ozdemir
• Alexis La Goutte
• Andrew Symington
• Christian Luetke-Stetzkamp
• Christoph Hoopmann
• Devin Buhl
• Florian Grignon
• Ganawa Juanah
• Jason Benedicic
• K Birt
• KillianCdP
• L.J. Hanson
• Louis SCHNEIDER
• Marcel Hamer
• Motte
• Natalie Romana Albers
• PRIHLOP
• Ram
• Tim Olson
• Tine Jozelj
• TomyLobo
• bzub
• greenpsi
• sflotat2607
• suse-coder

Changes

162 commits

• @​6e22c06 release(v1.10.0-alpha.1): prepare release
• @​3a2d986 fix: do not close client.Client.conn with finalizer
• @​73f30ff feat: bump pkgs for udev update
• @​aea90cb docs:

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 18 additional dependencies were updated

Details:

Package	Change
cel.dev/expr	v0.18.0 -> v0.19.0
github.com/containerd/stargz-snapshotter/estargz	v0.14.3 -> v0.16.3
github.com/docker/docker	v27.4.1+incompatible -> v27.5.0+incompatible
github.com/google/go-containerregistry	v0.20.2 -> v0.20.3
github.com/hashicorp/hc-install	v0.9.0 -> v0.9.1
github.com/hashicorp/terraform-exec	v0.21.0 -> v0.22.0
github.com/hashicorp/terraform-json	v0.23.0 -> v0.24.0
github.com/hashicorp/terraform-registry-address	v0.2.3 -> v0.2.4
github.com/siderolabs/go-blockdevice/v2	v2.0.11 -> v2.0.13
github.com/vbatts/tar-split	v0.11.5 -> v0.11.6
github.com/zclconf/go-cty	v1.15.0 -> v1.16.2
golang.org/x/crypto	v0.31.0 -> v0.32.0
golang.org/x/net	v0.33.0 -> v0.34.0
golang.org/x/oauth2	v0.24.0 -> v0.25.0
golang.org/x/sys	v0.28.0 -> v0.29.0
golang.org/x/term	v0.27.0 -> v0.28.0
golang.org/x/tools	v0.27.0 -> v0.29.0
google.golang.org/protobuf	v1.36.1 -> v1.36.3