Bump the gomod group with 2 updates

[dependabot]

Bumps the gomod group with 2 updates: github.com/buildpacks/pack and golang.org/x/exp.

Updates github.com/buildpacks/pack from 0.38.2 to 0.39.0

Release notes

Sourced from github.com/buildpacks/pack's releases.

pack v0.39.0

Prerequisites

• A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks
Usage:
pack [command]
Available Commands:
build                 Generate app image from source code
builder               Interact with builders
buildpack             Interact with buildpacks
extension             Interact with extensions
config                Interact with your local pack config file
inspect               Show information about a built app image
stack                 (deprecated) Interact with stacks
rebase                Rebase app image with latest run image
sbom                  Interact with SBoM
completion            Outputs completion script location
report                Display useful information for reporting an issue
version               Show current 'pack' version
help                  Help about any command
Flags:
--force-color   Force color output
-h, --help          Help for 'pack'
--no-color      Disable color output
-q, --quiet         Show less output
--timestamps    Enable timestamps in output
-v, --verbose       Show more output
--version       Show current 'pack' version
Use "pack [command] --help" for more information about a command.

Info

... (truncated)

Commits

• a8010d1 fix: upgrade imgutil to fix containerd snapshotter issue (#2493)
• e45b434 fix: update lifecycle API validation for experimental flag solve issue #2414 ...
• b604f01 Updating lifecycle version to v0.20.19 (#2481)
• 9321d2c Bump to go 1.25 (#2480)
• 53ab88c When fetching lifecycle image, use a platform-specific digest (#2467)
• 6e6e4bf build(deps): bump the go-dependencies group across 1 directory with 3 updates...
• 019eb74 fix(security): Resolve CVE-GHSA-cgrx-mc8f-2prm by upgrading selinux to v1.13....
• 6735aac build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#2473)
• f5f0a62 Use Docker API version negotiation instead of hardcoded version (#2474)
• d1a30b6 build(deps): bump the go-dependencies group with 8 updates (#2453)
• Additional commits viewable in compare view

Updates golang.org/x/exp from 0.0.0-20250408133849-7e4ce0ab07d0 to 0.0.0-20250911091902-df9299821621

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.