Update go modules (release-v0.6)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
github.com/cyberphone/json-canonicalization	require	digest	ba74d44 → 19d51d7
github.com/go-git/go-billy/v5	require	minor	v5.6.2 → v5.7.0
github.com/go-openapi/strfmt	require	minor	v0.23.0 → v0.25.0
github.com/golangci/golangci-lint	require	minor	v1.63.4 → v1.64.8
github.com/google/addlicense	require	minor	v1.1.1 → v1.2.0
github.com/in-toto/in-toto-golang	require	minor	v0.9.0 → v0.10.0
github.com/in-toto/in-toto-golang	require	minor	v0.9.1-0.20240317085821-8e2966059a09 → v0.10.0
github.com/konflux-ci/application-api	require	digest	e7eb2ec → c691ffe
github.com/open-policy-agent/conftest	require	minor	v0.55.0 → v0.66.0
github.com/pkg/diff	require	digest	20ebb0f → 4e6772a
github.com/secure-systems-lab/go-securesystemslib	require	minor	v0.9.0 → v0.10.0
github.com/spf13/afero	require	minor	v1.11.0 → v1.15.0
github.com/spf13/cobra	require	minor	v1.9.1 → v1.10.2
github.com/spf13/viper	require	minor	v1.19.0 → v1.21.0
github.com/tektoncd/chains	require	minor	v0.22.2 → v0.26.2
github.com/tektoncd/cli	require	minor	v0.38.0 → v0.42.0
github.com/testcontainers/testcontainers-go	require	minor	v0.34.0 → v0.40.0
github.com/wiremock/go-wiremock	require	minor	v1.11.0 → v1.15.0
golang.org/x/exp	require	digest	2d47ceb → 2842357
golang.org/x/net	require	minor	v0.47.0 → v0.50.0
golang.org/x/sync	require	minor	v0.18.0 → v0.19.0
helm.sh/helm/v3	require	minor	v3.16.4 → v3.20.0
k8s.io/api	require	minor	v0.34.2 → v0.35.0
k8s.io/apiextensions-apiserver	require	minor	v0.34.2 → v0.35.0
k8s.io/apimachinery	require	minor	v0.34.2 → v0.35.0
k8s.io/client-go	require	minor	v0.34.2 → v0.35.0
k8s.io/kube-openapi	require	digest	f3f2b99 → a19766b
k8s.io/kubernetes	require	minor	v1.34.2 → v1.35.1
oras.land/oras-go/v2	require	minor	v2.5.0 → v2.6.0
sigs.k8s.io/kind	require	minor	v0.26.0 → v0.31.0
sigs.k8s.io/kustomize/api	require	minor	v0.20.1 → v0.21.1
sigs.k8s.io/kustomize/kustomize/v5	require	minor	v5.7.1 → v5.8.1
sigs.k8s.io/kustomize/kyaml	require	minor	v0.20.1 → v0.21.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

go-git/go-billy (github.com/go-git/go-billy/v5)

v5.7.0

Compare Source

What's Changed

• Add support for Chmod on billy.Filesystem by @​bitfehler in #​171
• build: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​177

Full Changelog: go-git/go-billy@v5.6.2...v5.7.0

go-openapi/strfmt (github.com/go-openapi/strfmt)

v0.25.0

Compare Source

v0.24.0

Compare Source

golangci/golangci-lint (github.com/golangci/golangci-lint)

v1.64.8

Compare Source

• Detects use of configuration files from golangci-lint v2

v1.64.7

Compare Source

1. Linters bug fixes
   • depguard: from 2.2.0 to 2.2.1
   • dupl: from 3e9179a to f665c8d
   • gosec: from 2.22.1 to 2.22.2
   • staticcheck: from 0.6.0 to 0.6.1
2. Documentation
   • Add GitLab documentation

v1.64.6

Compare Source

1. Linters bug fixes
   • asciicheck: from 0.4.0 to 0.4.1
   • contextcheck: from 1.1.5 to 1.1.6
   • errcheck: from 1.8.0 to 1.9.0
   • exptostd: from 0.4.1 to 0.4.2
   • ginkgolinter: from 0.19.0 to 0.19.1
   • go-exhaustruct: from 3.3.0 to 3.3.1
   • gocheckcompilerdirectives: from 1.2.1 to 1.3.0
   • godot: from 1.4.20 to 1.5.0
   • perfsprint: from 0.8.1 to 0.8.2
   • revive: from 1.6.1 to 1.7.0
   • tagalign: from 1.4.1 to 1.4.2

v1.64.5

Compare Source

1. Bug fixes
   • Add missing flag new-from-merge-base-flag
2. Linters bug fixes
   • asciicheck: from 0.3.0 to 0.4.0
   • forcetypeassert: from 0.1.0 to 0.2.0
   • gosec: from 2.22.0 to 2.22.1

v1.64.4

Compare Source

1. Linters bug fixes
   • gci: fix standard packages list for go1.24

v1.64.3

Compare Source

1. Linters bug fixes
   • ginkgolinter: from 0.18.4 to 0.19.0
   • go-critic: from 0.11.5 to 0.12.0
   • revive: from 1.6.0 to 1.6.1
   • gci: fix standard packages list for go1.24
2. Misc.
   • Build Docker images with go1.24

v1.64.2

Compare Source

This is the last minor release of golangci-lint v1.
The next release will be golangci-lint v2.

1. Enhancements
   • 🎉 go1.24 support
   • New issues.new-from-merge-base option
   • New run.relative-path-mode option
2. Linters new features
   • copyloopvar: from 1.1.0 to 1.2.1 (support suggested fixes)
   • exptostd: from 0.3.1 to 0.4.1 (handles golang.org/x/exp/constraints.Ordered)
   • fatcontext: from 0.5.3 to 0.7.1 (new option: check-struct-pointers)
   • perfsprint: from 0.7.1 to 0.8.1 (new options: integer-format, error-format, string-format, bool-format, and hex-format)
   • revive: from 1.5.1 to 1.6.0 (new rules: redundant-build-tag, use-errors-new. New option early-return.early-return)
3. Linters bug fixes
   • go-errorlint: from 1.7.0 to 1.7.1
   • gochecknoglobals: from 0.2.1 to 0.2.2
   • godox: from 006bad1 to 1.1.0
   • gosec: from 2.21.4 to 2.22.0
   • iface: from 1.3.0 to 1.3.1
   • nilnesserr: from 0.1.1 to 0.1.2
   • protogetter: from 0.3.8 to 0.3.9
   • sloglint: from 0.7.2 to 0.9.0
   • spancheck: fix default StartSpanMatchersSlice values
   • staticcheck: from 0.5.1 to 0.6.0
4. Deprecations
   • ⚠️ tenv is deprecated and replaced by usetesting.os-setenv: true.
   • ⚠️ exportloopref deprecation step 2
5. Misc.
   • Sanitize severities by output format
   • Avoid panic with plugin without description
6. Documentation
   • Clarify depguard configuration

v1.64.1

Compare Source

Cancelled due to CI failure.

v1.64.0

Compare Source

Cancelled due to CI failure.

google/addlicense (github.com/google/addlicense)

v1.2.0

Compare Source

This is the first full release after a period of dormancy for the project. Support for several file types has been added, plus some internal cleanup.

What's Changed

• fix(readme): Update the docs to show current year by @​xorima in #​140
• Add support for TOML configuration files by @​kupiakos in #​144
• Support *.BUILD files by @​pmeric in #​145
• Adding support for the j2 format. by @​sjswerdlow in #​146
• feature: add pre-commit support by @​Thomy90 in #​138
• style: Each language in a case on its own line by @​flwyd in #​174
• Add Powershell Support [ps1, psm1] by @​JackStuart in #​165
• feat: add support for .htm files by @​CalebAlbers in #​121
• Fix test: expected copyright year must be 2018 by @​flwyd in #​178
• Upgrade GitHub workflows by @​flwyd in #​180
• Fix ignore on Windows by @​06393993 in #​157
• Add support for BUILD.bazel files by @​pmeric in #​151
• Add support for Rackup (.ru) config files by @​CalebAlbers in #​120
• Add .bash and .zsh extensions by @​CalebAlbers in #​122
• Add support for nix scripts by @​06393993 in #​156
• Reformat TestLicenseHeader to one filetype per line by @​flwyd in #​181
• Add AWK, Elixir, Julia, Lua, Raku, Scheme, & Vim by @​flwyd in #​182
• Add .graphql support by @​SleepySquash in #​111
• Add .less support by @​gnugomez in #​184
• Wrap the MIT License template to ensure the generated license fits into 80 characters by @​XuehaiPan in #​185
• feat(buck): add support for buck2 files (#​188) by @​yesudeep in #​187
• Cython files Support by @​Spill-Tea in #​192
• Goreleaser config update by @​Spill-Tea in #​193
• Adding support for the gradle file extension by @​tfroseman in #​194

New Contributors

• @​xorima made their first contribution in #​140
• @​kupiakos made their first contribution in #​144
• @​pmeric made their first contribution in #​145
• @​sjswerdlow made their first contribution in #​146
• @​Thomy90 made their first contribution in #​138
• @​JackStuart made their first contribution in #​165
• @​CalebAlbers made their first contribution in #​121
• @​06393993 made their first contribution in #​157
• @​SleepySquash made their first contribution in #​111
• @​gnugomez made their first contribution in #​184
• @​yesudeep made their first contribution in #​187
• @​Spill-Tea made their first contribution in #​192
• @​tfroseman made their first contribution in #​194

Full Changelog: google/addlicense@v1.1.1...v1.2.0

in-toto/in-toto-golang (github.com/in-toto/in-toto-golang)

v0.10.0

Compare Source

What's Changed

• chore(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @​dependabot[bot] in #​232
• Update maintainers and governance by @​adityasaky in #​233
• chore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @​dependabot[bot] in #​234
• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.5 by @​dependabot[bot] in #​235
• chore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @​dependabot[bot] in #​236
• Fix expired signature in test by @​adityasaky in #​241
• chore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 by @​dependabot[bot] in #​240
• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 by @​dependabot[bot] in #​239
• chore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by @​dependabot[bot] in #​242
• chore(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by @​dependabot[bot] in #​243
• Update GitHub Actions workflows by @​adityasaky in #​246
• chore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 by @​dependabot[bot] in #​245
• remove linters that are no longer supported and add to make file by @​pxp928 in #​249
• Add match products feature by @​adityasaky in #​237
• Remove unfinished link on record stop by @​PradyumnaKrishna in #​248
• chore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 by @​dependabot[bot] in #​250
• chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by @​dependabot[bot] in #​251
• chore(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by @​dependabot[bot] in #​255
• Add tests for coverage in envelope.go by @​adityasaky in #​256
• chore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 by @​dependabot[bot] in #​257
• chore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot[bot] in #​258
• chore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in #​259
• Fixes filepath pattern matching in windows by @​PradyumnaKrishna in #​254
• chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @​dependabot[bot] in #​261
• chore(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @​dependabot[bot] in #​262
• chore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 by @​dependabot[bot] in #​263
• chore(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.0 by @​dependabot[bot] in #​264
• chore(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 by @​dependabot[bot] in #​266
• Deprecate Provenance v1 struct in favor of /attestation protobufs by @​marcelamelara in #​267
• chore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 by @​dependabot[bot] in #​269
• chore(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​270
• Drop use of any for hash objects by @​adityasaky in #​238
• chore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 by @​dependabot[bot] in #​271
• chore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @​dependabot[bot] in #​273
• chore(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by @​dependabot[bot] in #​272
• chore(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 by @​dependabot[bot] in #​274
• chore(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by @​dependabot[bot] in #​275
• chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​276
• Trigger workflow on pushes only to master branch by @​adityasaky in #​280
• chore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 by @​dependabot[bot] in #​278
• chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​277
• add openssf scorecard by @​viveksahu26 in #​281
• chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @​dependabot[bot] in #​282
• Fix coveralls, use action by @​adityasaky in #​285
• Secure System Lab Sign/Verify by @​Forrin in #​279
• chore(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 by @​dependabot[bot] in #​287
• chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @​dependabot[bot] in #​289
• chore(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by @​dependabot[bot] in #​290
• chore(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @​dependabot[bot] in #​291
• chore(deps): bump google.golang.org/grpc from 1.60.0 to 1.60.1 by @​dependabot[bot] in #​292
• chore(deps): bump github.com/in-toto/attestation from 0.1.1-0.20230828220013-11b7a1a4ca51 to 1.0.1 by @​dependabot[bot] in #​294
• chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.7.0 to 0.8.0 by @​dependabot[bot] in #​293
• chore(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 by @​dependabot[bot] in #​295
• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.6 to 2.1.7 by @​dependabot[bot] in #​296
• chore(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @​dependabot[bot] in #​298
• chore(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 by @​dependabot[bot] in #​299
• chore(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 by @​dependabot[bot] in #​300
• chore(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @​dependabot[bot] in #​301
• chore(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0 by @​dependabot[bot] in #​302
• chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @​dependabot[bot] in #​303
• chore(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 by @​dependabot[bot] in #​304
• chore(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @​dependabot[bot] in #​305
• chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @​dependabot[bot] in #​306
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​307
• chore(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @​dependabot[bot] in #​308
• chore(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0 by @​dependabot[bot] in #​310
• chore(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 by @​dependabot[bot] in #​311
• chore(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 by @​dependabot[bot] in #​312
• chore(deps): bump github.com/in-toto/attestation from 1.0.1 to 1.0.2 by @​dependabot[bot] in #​313
• Bump Go versions by @​adityasaky in #​314
• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.7 to 2.2.0 by @​dependabot[bot] in #​309
• chore(deps): bump actions/checkout from 4.1.2 to 4.1.4 by @​dependabot[bot] in #​317
• chore(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @​dependabot[bot] in #​318
• chore(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @​dependabot[bot] in #​319
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @​dependabot[bot] in #​320
• chore(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @​dependabot[bot] in #​321
• chore(deps): bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 by @​dependabot[bot] in #​322
• chore(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.0 by @​dependabot[bot] in #​324
• chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot[bot] in #​323
• chore(deps): bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​325
• Fix serialization of SLSA BuildMetadata.InvocationID by @​msuozzo in #​328
• chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot[bot] in #​330
• Added necessary checks for type assertion by @​Yaxhveer in #​327
• chore(deps): bump coverallsapp/github-action from 2.2.3 to 2.3.0 by @​dependabot[bot] in #​326
• chore(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @​dependabot[bot] in #​329
• chore(deps): bump github.com/in-toto/attestation from 1.0.2 to 1.1.0 by @​dependabot[bot] in #​331
• chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @​dependabot[bot] in #​337
• chore(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 by @​dependabot[bot] in #​335
• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.2.0 to 2.3.0 by @​dependabot[bot] in #​338
• chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @​dependabot[bot] in #​341
• chore(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 by @​dependabot[bot] in #​340
• chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot[bot] in #​336
• chore(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0 by @​dependabot[bot] in #​344
• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @​dependabot[bot] in #​339
• chore(deps): bump golang.org/x/sys from 0.24.0 to 0.25.0 by @​dependabot[bot] in #​346
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @​dependabot[bot] in #​342
• chore(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.0 by @​dependabot[bot] in #​345
• chore(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.1 by @​dependabot[bot] in #​348
• chore(deps): bump google.golang.org/grpc from 1.66.1 to 1.66.2 by @​dependabot[bot] in #​349
• chore(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @​dependabot[bot] in #​351
• chore(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.1 by @​dependabot[bot] in #​352
• chore(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @​dependabot[bot] in #​353
• chore(deps): bump coverallsapp/github-action from 2.3.0 to 2.3.1 by @​dependabot[bot] in #​357
• chore(deps): bump coverallsapp/github-action from 2.3.1 to 2.3.2 by @​dependabot[bot] in #​358
• chore(deps): bump coverallsapp/github-action from 2.3.2 to 2.3.3 by @​dependabot[bot] in #​359
• chore(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by @​dependabot[bot] in #​360
• chore(deps): bump actions/checkout from 4.2.0 to 4.2.2 by @​dependabot[bot] in #​361
• chore(deps): bump coverallsapp/github-action from 2.3.3 to 2.3.4 by @​dependabot[bot] in #​362
• chore(deps): bump golang.org/x/sys from 0.25.0 to 0.27.0 by @​dependabot[bot] in #​364
• chore(deps): bump github.com/spiffe/go-sp

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/open-policy-agent/conftest@v0.66.0 requires go >= 1.25.3; switching to go1.25.7
go: downloading github.com/enterprise-contract/go-containerregistry v0.20.3-0.20250120083621-7be5271048b1
go: downloading github.com/tektoncd/pipeline v0.70.0
go: downloading github.com/sigstore/sigstore v1.8.15
go: downloading github.com/sigstore/protobuf-specs v0.4.0
go: downloading knative.dev/pkg v0.0.0-20250117084104-c43477f0052b
go: downloading github.com/cespare/xxhash v1.1.0
go: downloading github.com/lestrrat-go/jwx v1.2.29
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0
go: downloading github.com/vektah/gqlparser v1.2.0
go: downloading github.com/coreos/go-oidc/v3 v3.12.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0
go: downloading github.com/dgraph-io/badger/v4 v4.8.0
go: downloading go.opentelemetry.io/proto/otlp v1.7.1
go: downloading google.golang.org/api v0.217.0
go: downloading github.com/dgraph-io/ristretto v0.1.1
go: downloading github.com/huandu/go-sqlbuilder v1.38.1
go: github.com/muhammadmuzzammil1998/jsonc@v1.0.0 used for two different module paths (github.com/muhammadmuzzammil1998/jsonc and muzzammil.xyz/jsonc)

File name: tools/go.sum

Command failed: go get -t ./...
go: module github.com/open-policy-agent/conftest@v0.66.0 requires go >= 1.25.3; switching to go1.25.7
go: downloading oras.land/oras-go v1.2.6
go: github.com/muhammadmuzzammil1998/jsonc@v1.0.0 used for two different module paths (github.com/muhammadmuzzammil1998/jsonc and muzzammil.xyz/jsonc)