From c29b15e842381a42c251b66f6fbdf9059f8f48e3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 20 Aug 2026 13:16:48 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=9A=A8=20Update=20go=20modules?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 acceptance/go.mod | 6 +++---
 go.mod            | 8 ++++----
 tools/go.mod      | 4 ++--
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/acceptance/go.mod b/acceptance/go.mod
index 8daab640c..b9bf5d9f4 100644
--- a/acceptance/go.mod
+++ b/acceptance/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e
 	github.com/pkg/errors v0.9.1
 	github.com/secure-systems-lab/go-securesystemslib v0.11.0
-	github.com/sigstore/cosign/v2 v2.6.2
+	github.com/sigstore/cosign/v3 v3.1.3
 	github.com/sigstore/rekor v1.5.3
 	github.com/sigstore/sigstore v1.10.8
 	github.com/stretchr/testify v1.11.1
@@ -33,10 +33,10 @@ require (
 	github.com/wiremock/go-wiremock v1.11.0
 	github.com/yudai/gojsondiff v1.0.0
 	golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f
-	gopkg.in/go-jose/go-jose.v2 v2.6.3
+	gopkg.in/go-jose/go-jose.v4 v4.1.4
 	k8s.io/api v0.36.0
 	k8s.io/apimachinery v0.36.0
-	k8s.io/client-go v0.36.0
+	k8s.io/client-go v1.5.2
 	oras.land/oras-go/v2 v2.6.2
 	sigs.k8s.io/kind v0.26.0
 	sigs.k8s.io/kustomize/api v0.20.1
diff --git a/go.mod b/go.mod
index bf6ef2007..e1a6eb2c4 100644
--- a/go.mod
+++ b/go.mod
@@ -5,7 +5,7 @@ go 1.26.4
 require (
 	cuelang.org/go v0.16.0
 	github.com/CycloneDX/cyclonedx-go v0.10.0
-	github.com/MakeNowJust/heredoc v1.0.0
+	github.com/MakeNowJust/heredoc/v2 v2.0.1
 	github.com/Maldris/go-billy-afero v0.0.0-20200815120323-e9d3de59c99a
 	github.com/conforma/go-gather v1.0.2
 	github.com/docker/docker v28.5.2+incompatible
@@ -29,9 +29,9 @@ require (
 	github.com/open-policy-agent/opa v1.15.2
 	github.com/package-url/packageurl-go v0.1.3
 	github.com/qri-io/jsonpointer v0.1.1
-	github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
+	github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
 	github.com/secure-systems-lab/go-securesystemslib v0.11.0
-	github.com/sigstore/cosign/v2 v2.4.1
+	github.com/sigstore/cosign/v3 v3.1.3
 	github.com/sigstore/rekor v1.5.3
 	github.com/sigstore/sigstore v1.10.8
 	github.com/sirupsen/logrus v1.9.4
@@ -52,7 +52,7 @@ require (
 	golang.org/x/sync v0.22.0
 	k8s.io/apiextensions-apiserver v0.35.4
 	k8s.io/apimachinery v0.36.0
-	k8s.io/client-go v0.36.0
+	k8s.io/client-go v1.5.2
 	k8s.io/klog/v2 v2.140.0
 	k8s.io/kube-openapi v0.0.0-20260319004828-5883c5ee87b9
 	oras.land/oras-go/v2 v2.6.2
diff --git a/tools/go.mod b/tools/go.mod
index 915466a4a..bbda77064 100644
--- a/tools/go.mod
+++ b/tools/go.mod
@@ -4,14 +4,14 @@ go 1.26.4
 
 require (
 	github.com/daixiang0/gci v0.13.7
-	github.com/golangci/golangci-lint v1.64.8
+	github.com/golangci/golangci-lint/v2 v2.13.0
 	github.com/google/addlicense v1.2.0
 	github.com/open-policy-agent/conftest v0.66.0
 	github.com/tektoncd/chains v0.26.2
 	github.com/tektoncd/cli v0.44.1
 	github.com/wadey/gocovmerge v0.0.0-20160331181800-b5bfa59ec0ad
 	gotest.tools/gotestsum v1.12.3
-	helm.sh/helm/v3 v3.20.2
+	helm.sh/helm/v4 v4.2.4
 	k8s.io/kubernetes v1.34.3
 	sigs.k8s.io/kustomize/kustomize/v5 v5.8.1
 )