chore(deps): update module github.com/containers/image/v5 to v5.36.2

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/containers/image/v5	v5.35.0 -> v5.36.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

containers/image (github.com/containers/image/v5)

v5.36.2

Compare Source

What's Changed

• [release-5.36] Bump to c/image v5.36.1 by @​TomSweeneyRedHat in #​2920
• [release-5.36] rekor: do not cancel http context by @​TomSweeneyRedHat in #​2943

Full Changelog: containers/image@v5.36.1...v5.36.2

v5.36.1

Compare Source

What's Changed

• [release-5.36] Update the CI image, to match Skopeo's updated test code by @​TomSweeneyRedHat in #​2913

Full Changelog: containers/image@v5.36.0...v5.36.1

v5.36.0

Compare Source

What's Changed

• Bump c/storage to v1.58.0, c/image to v5.35.0 by @​TomSweeneyRedHat in #​2828
• chore(deps): update dependency golangci/golangci-lint to v2.1.2 by @​renovate[bot] in #​2827
• fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.28 by @​renovate[bot] in #​2829
• fix(deps): update module github.com/docker/docker to v28.1.0+incompatible by @​renovate[bot] in #​2834
• fix(deps): update module github.com/docker/cli to v28.1.0+incompatible by @​renovate[bot] in #​2833
• fix(deps): update module github.com/docker/cli to v28.1.1+incompatible by @​renovate[bot] in #​2836
• fix(deps): update module github.com/docker/docker to v28.1.1+incompatible by @​renovate[bot] in #​2835
• chore(deps): update dependency containers/automation_images to v20250422 by @​renovate[bot] in #​2839
• chore(deps): update dependency golangci/golangci-lint to v2.1.5 by @​renovate[bot] in #​2840
• fix(deps): update module github.com/sigstore/sigstore to v1.9.4 by @​renovate[bot] in #​2842
• chore(deps): update dependency golangci/golangci-lint to v2.1.6 by @​renovate[bot] in #​2846
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.0 by @​renovate[bot] in #​2845
• fix(deps): update module golang.org/x/oauth2 to v0.30.0 by @​renovate[bot] in #​2847
• fix(deps): update module golang.org/x/sync to v0.14.0 by @​renovate[bot] in #​2848
• fix(deps): update module golang.org/x/term to v0.32.0 by @​renovate[bot] in #​2850
• fix(deps): update module golang.org/x/crypto to v0.38.0 by @​renovate[bot] in #​2849
• fix(deps): update module dario.cat/mergo to v1.0.2 by @​renovate[bot] in #​2851
• vendor: update c/storage by @​giuseppe in #​2844
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.1 by @​renovate[bot] in #​2853
• Update old indirect dependencies by @​mtrmac in #​2787
• Stop setting the btrfs_noversion build tag by @​mtrmac in #​2831
• fix(deps): update module github.com/santhosh-tekuri/jsonschema/v6 to v6.0.2 by @​renovate[bot] in #​2855
• fix(deps): update module github.com/docker/docker to v28.2.1+incompatible by @​renovate[bot] in #​2859
• fix(deps): update module github.com/docker/cli to v28.2.1+incompatible by @​renovate[bot] in #​2858
• fix(deps): update module github.com/docker/docker to v28.2.2+incompatible by @​renovate[bot] in #​2862
• fix(deps): update module github.com/docker/cli to v28.2.2+incompatible by @​renovate[bot] in #​2861
• INCOMPATIBLE: Remove the implementation of the ostree transport by @​mtrmac in #​2821
• Only upload sigstore signatures to the sigstore tag schema by @​mtrmac in #​2717
• Update old dependencies by @​mtrmac in #​2863
• fix(deps): update github.com/containers/storage digest to 78f4258 by @​renovate[bot] in #​2864
• Queue a partially-pulled layer for commit immediately after staging it by @​mtrmac in #​2799
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.2 by @​renovate[bot] in #​2865
• fix(deps): update module golang.org/x/sync to v0.15.0 by @​renovate[bot] in #​2866
• fix(deps): update module golang.org/x/crypto to v0.39.0 by @​renovate[bot] in #​2867
• fix(deps): update module github.com/sigstore/sigstore to v1.9.5 by @​renovate[bot] in #​2871
• fix(deps): update module go.etcd.io/bbolt to v1.4.1 by @​renovate[bot] in #​2870
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.8 by @​renovate[bot] in #​2872
• Regenerate keys TestKeyFingerprintWithPassphrase and TestKeyFingerprint by @​mtrmac in #​2875
• fix(deps): update module github.com/docker/docker to v28.3.0+incompatible by @​renovate[bot] in #​2880
• fix(deps): update module github.com/docker/cli to v28.3.0+incompatible by @​renovate[bot] in #​2879
• CI: run tests that need root as root by @​Luap99 in #​2878
• remove containers_image_{fulcio_stub,rekor_stub} build tags by @​Luap99 in #​2881
• Replace sigstore/rekor/pkg/client with a manually-created client by @​Luap99 in #​2873
• Update module go.etcd.io/bbolt to v1.4.2 by @​renovate[bot] in #​2882
• Update the Rekor client to match Rekor 1.3.10 by @​mtrmac in #​2884
• Update dependency golangci/golangci-lint to v2.2.1 by @​renovate[bot] in #​2885
• Update github.com/containers/storage digest to 83650ab by @​renovate[bot] in #​2886
• Update module github.com/docker/docker to v28.3.1+incompatible by @​renovate[bot] in #​2889
• Update module github.com/docker/cli to v28.3.1+incompatible by @​renovate[bot] in #​2888
• Run CI all on the Fedora images by @​mtrmac in #​2890
• Restrict the root-only tests to ./storage by @​mtrmac in #​2891
• Update module golang.org/x/sync to v0.16.0 by @​renovate[bot] in #​2892
• Update module github.com/docker/cli to v28.3.2+incompatible by @​renovate[bot] in #​2893
• Update module golang.org/x/term to v0.33.0 by @​renovate[bot] in #​2895
• Update module github.com/docker/docker to v28.3.2+incompatible by @​renovate[bot] in #​2894
• Add a new Signer API for creating simple signing signatures with Sequoia-PGP by @​mtrmac in #​2896
• Update module golang.org/x/crypto to v0.40.0 by @​renovate[bot] in #​2897
• Update dependency golangci/golangci-lint to v2.2.2 by @​renovate[bot] in #​2898

Full Changelog: containers/image@v5.35.0...v5.36.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[gkurz]

/ok-to-test

[gkurz]

/retest

[gkurz]

/retest

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/containers/storage	v1.58.0 -> v1.59.1
github.com/docker/docker	v28.0.4+incompatible -> v28.3.2+incompatible
github.com/moby/sys/sequential	v0.5.0 -> v0.6.0
go.opentelemetry.io/otel	v1.34.0 -> v1.35.0
go.opentelemetry.io/otel/trace	v1.34.0 -> v1.35.0

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[gkurz]

/retest

[gkurz]

/lgtm