fix(deps): lock file maintenance vulnfeeds (#4190)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Confidence |
|---|---|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |  |  |
|
[cloud.google.com/go/secretmanager](https://redirect.github.com/googleapis/google-cloud-go)
| require | minor | `v1.15.0` -> `v1.16.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fsecretmanager/v1.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fsecretmanager/v1.15.0/v1.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[cloud.google.com/go/storage](https://redirect.github.com/googleapis/google-cloud-go)
| require | patch | `v1.57.0` -> `v1.57.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fstorage/v1.57.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fstorage/v1.57.0/v1.57.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| gcr.io/google.com/cloudsdktool/google-cloud-cli | final | digest |
`cdac858` -> `080b442` | | |
|
[github.com/gkampitakis/go-snaps](https://redirect.github.com/gkampitakis/go-snaps)
| require | patch | `v0.5.7` -> `v0.5.15` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgkampitakis%2fgo-snaps/v0.5.15?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgkampitakis%2fgo-snaps/v0.5.7/v0.5.15?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)
| require | patch | `v5.16.2` -> `v5.16.3` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.16.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.16.2/v5.16.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[github.com/ossf/osv-schema/bindings/go](https://redirect.github.com/ossf/osv-schema)
| require | digest | `3d1fb54` -> `9fb6c88` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fossf%2fosv-schema%2fbindings%2fgo/v0.0.0-20251112210320-9fb6c8870ac1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fossf%2fosv-schema%2fbindings%2fgo/v0.0.0-20251027003933-3d1fb541b2bf/v0.0.0-20251112210320-9fb6c8870ac1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [go](https://go.dev/)
([source](https://redirect.github.com/golang/go)) | golang | patch |
`1.25.3` -> `1.25.4` |
[![age](https://developer.mend.io/api/mc/badges/age/golang-version/go/1.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/golang-version/go/1.25.3/1.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| golang | stage | patch | `1.25.3-alpine` -> `1.25.4-alpine` |
[![age](https://developer.mend.io/api/mc/badges/age/docker/golang/1.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/golang/1.25.3/1.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client)
| require | minor | `v0.247.0` -> `v0.256.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.256.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.247.0/v0.256.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [pylint](https://redirect.github.com/pylint-dev/pylint)
([changelog](https://pylint.readthedocs.io/en/latest/whatsnew/3/)) | dev
| patch | `3.3.8` -> `3.3.9` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/pylint/3.3.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pylint/3.3.8/3.3.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>gkampitakis/go-snaps
(github.com/gkampitakis/go-snaps)</summary>

###
[`v0.5.15`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.15)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.14...v0.5.15)

#### What's Changed

- test: explicitly return named variables by
[@&#8203;G-Rath](https://redirect.github.com/G-Rath) in
[#&#8203;137](https://redirect.github.com/gkampitakis/go-snaps/pull/137)
- ci: show diff after running linting by
[@&#8203;G-Rath](https://redirect.github.com/G-Rath) in
[#&#8203;136](https://redirect.github.com/gkampitakis/go-snaps/pull/136)
- fix: only update snapshots when actually allowed by
[@&#8203;G-Rath](https://redirect.github.com/G-Rath) in
[#&#8203;135](https://redirect.github.com/gkampitakis/go-snaps/pull/135)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.14...v0.5.15>

###
[`v0.5.14`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.14)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.13...v0.5.14)

#### What's Changed

- feat: snaps.Clean now returns if snaps dirty and err by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;131](https://redirect.github.com/gkampitakis/go-snaps/pull/131)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.13...v0.5.14>

###
[`v0.5.13`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.13)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.12...v0.5.13)

#### What's Changed

- feat: support MatchStandaloneYAML by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;128](https://redirect.github.com/gkampitakis/go-snaps/pull/128)
- chore: update go-yaml and gh-action deps by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;129](https://redirect.github.com/gkampitakis/go-snaps/pull/129)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.12...v0.5.13>

###
[`v0.5.12`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.12)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.11...v0.5.12)

#### What's Changed

- feat: add UPDATE\_SNAPS=always for updating and creating snaps on CI
setup by [@&#8203;gkampitakis](https://redirect.github.com/gkampitakis)
in
[#&#8203;126](https://redirect.github.com/gkampitakis/go-snaps/pull/126)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.11...v0.5.12>

###
[`v0.5.11`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.11)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.10...v0.5.11)

##### What's Changed

- feat: add json format config by
[@&#8203;kitimark](https://redirect.github.com/kitimark) in
[#&#8203;121](https://redirect.github.com/gkampitakis/go-snaps/pull/121)

##### New Contributors

- [@&#8203;kitimark](https://redirect.github.com/kitimark) made their
first contribution in
[#&#8203;121](https://redirect.github.com/gkampitakis/go-snaps/pull/121)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.10...v0.5.11>

###
[`v0.5.10`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.10)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.9...v0.5.10)

##### What's Changed

- fix: handle builds with trimpath enabled by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;120](https://redirect.github.com/gkampitakis/go-snaps/pull/120)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.9...v0.5.10>

###
[`v0.5.9`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.9)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.8...v0.5.9)

##### What's Changed

- fix: snaps.Update should apply and on snapshot create by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;119](https://redirect.github.com/gkampitakis/go-snaps/pull/119)

## **Full Changelog**:
<gkampitakis/go-snaps@v0.5.8...v0.5.9>

Kudos to [@&#8203;orloffv](https://redirect.github.com/orloffv) for this
issue
[#&#8203;116](https://redirect.github.com/gkampitakis/go-snaps/pull/116)

###
[`v0.5.8`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.8)

[Compare
Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.7...v0.5.8)

##### What's Changed

- feat: implement matchYAML by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;114](https://redirect.github.com/gkampitakis/go-snaps/pull/114)
- feat: implement matchStandaloneJSON by
[@&#8203;gkampitakis](https://redirect.github.com/gkampitakis) in
[#&#8203;113](https://redirect.github.com/gkampitakis/go-snaps/pull/113)

**Full Changelog**:
<gkampitakis/go-snaps@v0.5.7...v0.5.8>

</details>

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

###
[`v5.16.3`](https://redirect.github.com/go-git/go-git/releases/tag/v5.16.3)

[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.16.2...v5.16.3)

#### What's Changed

- internal: Expand regex to fix build \[5.x] by
[@&#8203;baloo](https://redirect.github.com/baloo) in
[#&#8203;1644](https://redirect.github.com/go-git/go-git/pull/1644)
- build: raise timeouts for windows CI tests and disable CIFuzz \[5.x]
by [@&#8203;baloo](https://redirect.github.com/baloo) in
[#&#8203;1646](https://redirect.github.com/go-git/go-git/pull/1646)
- plumbing: support commits extra headers, support jujutsu signed commit
\[5.x] by [@&#8203;baloo](https://redirect.github.com/baloo) in
[#&#8203;1633](https://redirect.github.com/go-git/go-git/pull/1633)

**Full Changelog**:
<go-git/go-git@v5.16.2...v5.16.3>

</details>

<details>
<summary>golang/go (go)</summary>

###
[`v1.25.4`](https://redirect.github.com/golang/go/compare/go1.25.3...go1.25.4)

</details>

<details>
<summary>googleapis/google-api-go-client
(google.golang.org/api)</summary>

###
[`v0.256.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.256.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.255.0...v0.256.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3366](https://redirect.github.com/googleapis/google-api-go-client/issues/3366))
([997c613](https://redirect.github.com/googleapis/google-api-go-client/commit/997c613e70ddbf1483e4212641cb09db86f7716b))
- **all:** Auto-regenerate discovery clients
([#&#8203;3368](https://redirect.github.com/googleapis/google-api-go-client/issues/3368))
([57e958d](https://redirect.github.com/googleapis/google-api-go-client/commit/57e958d22096bca64db83dc7888f248f0d8a6bc4))
- **all:** Auto-regenerate discovery clients
([#&#8203;3369](https://redirect.github.com/googleapis/google-api-go-client/issues/3369))
([5d436f7](https://redirect.github.com/googleapis/google-api-go-client/commit/5d436f7172766d9dab04cfcf3dd0e5054228a084))
- **all:** Auto-regenerate discovery clients
([#&#8203;3370](https://redirect.github.com/googleapis/google-api-go-client/issues/3370))
([140a610](https://redirect.github.com/googleapis/google-api-go-client/commit/140a610ace04e635f919acf8f7a5441d1d4546b9))
- **all:** Auto-regenerate discovery clients
([#&#8203;3371](https://redirect.github.com/googleapis/google-api-go-client/issues/3371))
([39a2bc0](https://redirect.github.com/googleapis/google-api-go-client/commit/39a2bc07bfc4693cf0a99de0fe70807783471e99))

###
[`v0.255.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.255.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.254.0...v0.255.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3357](https://redirect.github.com/googleapis/google-api-go-client/issues/3357))
([430bc46](https://redirect.github.com/googleapis/google-api-go-client/commit/430bc4639d14b3c7969981603891163421883695))
- **all:** Auto-regenerate discovery clients
([#&#8203;3359](https://redirect.github.com/googleapis/google-api-go-client/issues/3359))
([0bcacee](https://redirect.github.com/googleapis/google-api-go-client/commit/0bcacee13f1bd305cf1e16bfb714fbe998b7fcb1))
- **all:** Auto-regenerate discovery clients
([#&#8203;3360](https://redirect.github.com/googleapis/google-api-go-client/issues/3360))
([c9cdcad](https://redirect.github.com/googleapis/google-api-go-client/commit/c9cdcadebd1ac3e2de3c0146b3a1d6eb0956c3fc))
- **all:** Auto-regenerate discovery clients
([#&#8203;3361](https://redirect.github.com/googleapis/google-api-go-client/issues/3361))
([acdddcd](https://redirect.github.com/googleapis/google-api-go-client/commit/acdddcdc891d41f9ac22bcf031d53f9f17810637))
- **all:** Auto-regenerate discovery clients
([#&#8203;3362](https://redirect.github.com/googleapis/google-api-go-client/issues/3362))
([040f8aa](https://redirect.github.com/googleapis/google-api-go-client/commit/040f8aaadedfcf6fb449937e734f3c57a3cfedd4))
- **all:** Auto-regenerate discovery clients
([#&#8203;3364](https://redirect.github.com/googleapis/google-api-go-client/issues/3364))
([8f13004](https://redirect.github.com/googleapis/google-api-go-client/commit/8f13004c104b3620144017f36886ef3818878dad))
- **all:** Auto-regenerate discovery clients
([#&#8203;3365](https://redirect.github.com/googleapis/google-api-go-client/issues/3365))
([4ea8be0](https://redirect.github.com/googleapis/google-api-go-client/commit/4ea8be06ce628f4af4949c6954e1342c0db8e76b))

###
[`v0.254.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.254.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.253.0...v0.254.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3348](https://redirect.github.com/googleapis/google-api-go-client/issues/3348))
([8e2becc](https://redirect.github.com/googleapis/google-api-go-client/commit/8e2becc10cbfe6a5f2c9ad147730f4271c364417))
- **all:** Auto-regenerate discovery clients
([#&#8203;3350](https://redirect.github.com/googleapis/google-api-go-client/issues/3350))
([9e07cd0](https://redirect.github.com/googleapis/google-api-go-client/commit/9e07cd04a1bc6d229520b666a3f5d00dfb930d4c))
- **all:** Auto-regenerate discovery clients
([#&#8203;3351](https://redirect.github.com/googleapis/google-api-go-client/issues/3351))
([470f33c](https://redirect.github.com/googleapis/google-api-go-client/commit/470f33c2321d0b6e81b1b55cbc2640edad5fc848))
- **all:** Auto-regenerate discovery clients
([#&#8203;3352](https://redirect.github.com/googleapis/google-api-go-client/issues/3352))
([cff2ae6](https://redirect.github.com/googleapis/google-api-go-client/commit/cff2ae692ea1ed74b7b280196b4b8391005e7f76))
- **all:** Auto-regenerate discovery clients
([#&#8203;3354](https://redirect.github.com/googleapis/google-api-go-client/issues/3354))
([6b3a07f](https://redirect.github.com/googleapis/google-api-go-client/commit/6b3a07f3cd5d3163ac3453bdb970bde23a57a734))
- **all:** Auto-regenerate discovery clients
([#&#8203;3355](https://redirect.github.com/googleapis/google-api-go-client/issues/3355))
([4c613b6](https://redirect.github.com/googleapis/google-api-go-client/commit/4c613b616c15fd2597fc898a8bb07bef890a85a1))

###
[`v0.253.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.253.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.252.0...v0.253.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3337](https://redirect.github.com/googleapis/google-api-go-client/issues/3337))
([40f2752](https://redirect.github.com/googleapis/google-api-go-client/commit/40f2752ec3e2075ceada92b8dcc3f6b2e465bb8d))
- **all:** Auto-regenerate discovery clients
([#&#8203;3339](https://redirect.github.com/googleapis/google-api-go-client/issues/3339))
([d1ef976](https://redirect.github.com/googleapis/google-api-go-client/commit/d1ef9766c46dcf687ee1711cc921b8162af47275))
- **all:** Auto-regenerate discovery clients
([#&#8203;3340](https://redirect.github.com/googleapis/google-api-go-client/issues/3340))
([580c65f](https://redirect.github.com/googleapis/google-api-go-client/commit/580c65f00246810dadf22d103614c9dbaaaf93af))
- **all:** Auto-regenerate discovery clients
([#&#8203;3341](https://redirect.github.com/googleapis/google-api-go-client/issues/3341))
([9d031c4](https://redirect.github.com/googleapis/google-api-go-client/commit/9d031c42291eef4e164462c979beafb7b2133155))
- **all:** Auto-regenerate discovery clients
([#&#8203;3342](https://redirect.github.com/googleapis/google-api-go-client/issues/3342))
([ca2b9ad](https://redirect.github.com/googleapis/google-api-go-client/commit/ca2b9ad85a1e1889fbed2c33f3e1e6cd7dac014b))
- **all:** Auto-regenerate discovery clients
([#&#8203;3344](https://redirect.github.com/googleapis/google-api-go-client/issues/3344))
([844753e](https://redirect.github.com/googleapis/google-api-go-client/commit/844753e402286005aa20ad8defb7eece1d4aea0c))
- **all:** Auto-regenerate discovery clients
([#&#8203;3345](https://redirect.github.com/googleapis/google-api-go-client/issues/3345))
([3de8a5b](https://redirect.github.com/googleapis/google-api-go-client/commit/3de8a5b1f08d0b14773636ed984e9f4c62d097cc))
- **all:** Auto-regenerate discovery clients
([#&#8203;3346](https://redirect.github.com/googleapis/google-api-go-client/issues/3346))
([a590b9a](https://redirect.github.com/googleapis/google-api-go-client/commit/a590b9a89840c418a5dd1a426ef91ab740ac536e))
- **all:** Auto-regenerate discovery clients
([#&#8203;3347](https://redirect.github.com/googleapis/google-api-go-client/issues/3347))
([40ca8fe](https://redirect.github.com/googleapis/google-api-go-client/commit/40ca8fedda58c6b2f68a0e8b5be325628f4a0c09))

###
[`v0.252.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.252.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.251.0...v0.252.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3326](https://redirect.github.com/googleapis/google-api-go-client/issues/3326))
([c992545](https://redirect.github.com/googleapis/google-api-go-client/commit/c9925454087ae745d966061b1e5e091236a23b73))
- **all:** Auto-regenerate discovery clients
([#&#8203;3328](https://redirect.github.com/googleapis/google-api-go-client/issues/3328))
([b9b915b](https://redirect.github.com/googleapis/google-api-go-client/commit/b9b915b1d871407fd86912eaa5073dec1dd28cd0))
- **all:** Auto-regenerate discovery clients
([#&#8203;3330](https://redirect.github.com/googleapis/google-api-go-client/issues/3330))
([fcb7723](https://redirect.github.com/googleapis/google-api-go-client/commit/fcb7723a725ee8eb73e0fb511c1d5b33c25ebd50))
- **all:** Auto-regenerate discovery clients
([#&#8203;3331](https://redirect.github.com/googleapis/google-api-go-client/issues/3331))
([a67f44d](https://redirect.github.com/googleapis/google-api-go-client/commit/a67f44d16fb8ee506127e2d411b84e708d4fa4df))
- **all:** Auto-regenerate discovery clients
([#&#8203;3332](https://redirect.github.com/googleapis/google-api-go-client/issues/3332))
([b9890fc](https://redirect.github.com/googleapis/google-api-go-client/commit/b9890fcd362e2b7fe6f2ec4b37257408d5f09edb))
- **all:** Auto-regenerate discovery clients
([#&#8203;3334](https://redirect.github.com/googleapis/google-api-go-client/issues/3334))
([163216d](https://redirect.github.com/googleapis/google-api-go-client/commit/163216d91d6e20831b2cda5400aee0e587cfec18))
- **all:** Auto-regenerate discovery clients
([#&#8203;3336](https://redirect.github.com/googleapis/google-api-go-client/issues/3336))
([2c4dd78](https://redirect.github.com/googleapis/google-api-go-client/commit/2c4dd78944ebf9f04258ccea6800f57a7cdd8dae))

###
[`v0.251.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.251.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.250.0...v0.251.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3319](https://redirect.github.com/googleapis/google-api-go-client/issues/3319))
([7ef0f9b](https://redirect.github.com/googleapis/google-api-go-client/commit/7ef0f9bc31e15c6998e4b26b511bf1d5d50a6970))
- **all:** Auto-regenerate discovery clients
([#&#8203;3321](https://redirect.github.com/googleapis/google-api-go-client/issues/3321))
([2cb519b](https://redirect.github.com/googleapis/google-api-go-client/commit/2cb519b1a2d45c30fe1dfde10b47a83424d30231))
- **all:** Auto-regenerate discovery clients
([#&#8203;3322](https://redirect.github.com/googleapis/google-api-go-client/issues/3322))
([3e4bc60](https://redirect.github.com/googleapis/google-api-go-client/commit/3e4bc6062699a1710d50f68b694bbe3a50132e82))
- **all:** Auto-regenerate discovery clients
([#&#8203;3324](https://redirect.github.com/googleapis/google-api-go-client/issues/3324))
([b41b5a5](https://redirect.github.com/googleapis/google-api-go-client/commit/b41b5a5c9ef21d7499b6f206c214c4a16933e3b7))
- **all:** Auto-regenerate discovery clients
([#&#8203;3325](https://redirect.github.com/googleapis/google-api-go-client/issues/3325))
([8c5ef06](https://redirect.github.com/googleapis/google-api-go-client/commit/8c5ef06788b235fcfb78e7226cf9905e88c96628))

###
[`v0.250.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.250.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.249.0...v0.250.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3306](https://redirect.github.com/googleapis/google-api-go-client/issues/3306))
([04e9340](https://redirect.github.com/googleapis/google-api-go-client/commit/04e934090bdb2c6defe389051d4a71346fca2f5b))
- **all:** Auto-regenerate discovery clients
([#&#8203;3308](https://redirect.github.com/googleapis/google-api-go-client/issues/3308))
([b85955a](https://redirect.github.com/googleapis/google-api-go-client/commit/b85955acd18b5172dfadd48edb7450304b563423))
- **all:** Auto-regenerate discovery clients
([#&#8203;3309](https://redirect.github.com/googleapis/google-api-go-client/issues/3309))
([6d11ef4](https://redirect.github.com/googleapis/google-api-go-client/commit/6d11ef46bc0bd6b3b6d35308abdba321c2949cf7))
- **all:** Auto-regenerate discovery clients
([#&#8203;3310](https://redirect.github.com/googleapis/google-api-go-client/issues/3310))
([5ed74f3](https://redirect.github.com/googleapis/google-api-go-client/commit/5ed74f3762c4d5b9feb311eef05b93ad7601cb7b))
- **all:** Auto-regenerate discovery clients
([#&#8203;3311](https://redirect.github.com/googleapis/google-api-go-client/issues/3311))
([ffae061](https://redirect.github.com/googleapis/google-api-go-client/commit/ffae06168e8e52e49cb76884ca74f3ddc3f5a7c9))
- **all:** Auto-regenerate discovery clients
([#&#8203;3312](https://redirect.github.com/googleapis/google-api-go-client/issues/3312))
([7f0983c](https://redirect.github.com/googleapis/google-api-go-client/commit/7f0983cef96e29797343025ca9cbfecc98ef89d3))
- **all:** Auto-regenerate discovery clients
([#&#8203;3314](https://redirect.github.com/googleapis/google-api-go-client/issues/3314))
([0e5a06d](https://redirect.github.com/googleapis/google-api-go-client/commit/0e5a06df6b629c4c96210b01412c5ff2a082f027))
- **all:** Auto-regenerate discovery clients
([#&#8203;3315](https://redirect.github.com/googleapis/google-api-go-client/issues/3315))
([a6d27cf](https://redirect.github.com/googleapis/google-api-go-client/commit/a6d27cff843c2e65feafd252cf87a871a4448ee8))
- **all:** Auto-regenerate discovery clients
([#&#8203;3316](https://redirect.github.com/googleapis/google-api-go-client/issues/3316))
([e4eefd9](https://redirect.github.com/googleapis/google-api-go-client/commit/e4eefd950ed18cb8fd1ec642c0fea6f0cb3b8322))
- **all:** Auto-regenerate discovery clients
([#&#8203;3318](https://redirect.github.com/googleapis/google-api-go-client/issues/3318))
([2242712](https://redirect.github.com/googleapis/google-api-go-client/commit/2242712e4569edd123fdac8f3f12beb536942a4b))

###
[`v0.249.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.249.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.248.0...v0.249.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3281](https://redirect.github.com/googleapis/google-api-go-client/issues/3281))
([c03d56b](https://redirect.github.com/googleapis/google-api-go-client/commit/c03d56bd807f14ef4612df738ba9d3f1f6d31d1d))
- **all:** Auto-regenerate discovery clients
([#&#8203;3283](https://redirect.github.com/googleapis/google-api-go-client/issues/3283))
([4d1d336](https://redirect.github.com/googleapis/google-api-go-client/commit/4d1d33689712d397ab582ee046fc51c94c080e04))
- **all:** Auto-regenerate discovery clients
([#&#8203;3284](https://redirect.github.com/googleapis/google-api-go-client/issues/3284))
([d2b41b6](https://redirect.github.com/googleapis/google-api-go-client/commit/d2b41b6ebb0b352d79d2ea64f89579ebbc9f96c7))
- **all:** Auto-regenerate discovery clients
([#&#8203;3285](https://redirect.github.com/googleapis/google-api-go-client/issues/3285))
([bcde943](https://redirect.github.com/googleapis/google-api-go-client/commit/bcde9430e3e68f4ec7bebbbf54742774b9f7cfa7))
- **all:** Auto-regenerate discovery clients
([#&#8203;3286](https://redirect.github.com/googleapis/google-api-go-client/issues/3286))
([27530dd](https://redirect.github.com/googleapis/google-api-go-client/commit/27530ddc5176ffbbd8a418f532878b495cb4fdf5))
- **all:** Auto-regenerate discovery clients
([#&#8203;3288](https://redirect.github.com/googleapis/google-api-go-client/issues/3288))
([240e54a](https://redirect.github.com/googleapis/google-api-go-client/commit/240e54a47415519f419f9c35a7699205fac62dd1))
- **all:** Auto-regenerate discovery clients
([#&#8203;3289](https://redirect.github.com/googleapis/google-api-go-client/issues/3289))
([2bd4a72](https://redirect.github.com/googleapis/google-api-go-client/commit/2bd4a72fae45cc4cb10b77ad1b1c2d5d8d99a650))
- **all:** Auto-regenerate discovery clients
([#&#8203;3291](https://redirect.github.com/googleapis/google-api-go-client/issues/3291))
([d09c7d3](https://redirect.github.com/googleapis/google-api-go-client/commit/d09c7d319a1191f231043622df5be2f4dba1f629))
- **all:** Auto-regenerate discovery clients
([#&#8203;3292](https://redirect.github.com/googleapis/google-api-go-client/issues/3292))
([7b2235b](https://redirect.github.com/googleapis/google-api-go-client/commit/7b2235b3826bd01cc4c0f47ab9828692875029c6))
- **all:** Auto-regenerate discovery clients
([#&#8203;3293](https://redirect.github.com/googleapis/google-api-go-client/issues/3293))
([2e60cd5](https://redirect.github.com/googleapis/google-api-go-client/commit/2e60cd5bcc4bafa45fa699a7753db273568af68a))
- **all:** Auto-regenerate discovery clients
([#&#8203;3294](https://redirect.github.com/googleapis/google-api-go-client/issues/3294))
([162aba4](https://redirect.github.com/googleapis/google-api-go-client/commit/162aba409d969077157d3ecec3f7578af15a62b4))
- **all:** Auto-regenerate discovery clients
([#&#8203;3295](https://redirect.github.com/googleapis/google-api-go-client/issues/3295))
([e297a42](https://redirect.github.com/googleapis/google-api-go-client/commit/e297a428606910b17750a7d09aaec92c2513b415))
- **all:** Auto-regenerate discovery clients
([#&#8203;3296](https://redirect.github.com/googleapis/google-api-go-client/issues/3296))
([f98f835](https://redirect.github.com/googleapis/google-api-go-client/commit/f98f8357e2480c0e96acfa004f30c731988e4cbe))
- **all:** Auto-regenerate discovery clients
([#&#8203;3297](https://redirect.github.com/googleapis/google-api-go-client/issues/3297))
([ababe60](https://redirect.github.com/googleapis/google-api-go-client/commit/ababe603c1ec78c9becb3daf8cde2b4fbd108fde))
- **all:** Auto-regenerate discovery clients
([#&#8203;3299](https://redirect.github.com/googleapis/google-api-go-client/issues/3299))
([ad70b6e](https://redirect.github.com/googleapis/google-api-go-client/commit/ad70b6eee9be539868c5b8004a7be4501fdd7404))
- **all:** Auto-regenerate discovery clients
([#&#8203;3300](https://redirect.github.com/googleapis/google-api-go-client/issues/3300))
([4fcd5bb](https://redirect.github.com/googleapis/google-api-go-client/commit/4fcd5bbd71a8e09cc05c17775fffc365d00dbcb5))
- **all:** Auto-regenerate discovery clients
([#&#8203;3301](https://redirect.github.com/googleapis/google-api-go-client/issues/3301))
([6db0561](https://redirect.github.com/googleapis/google-api-go-client/commit/6db056121da007d4c80b1eacdff5cf23e60fa6a2))
- **all:** Auto-regenerate discovery clients
([#&#8203;3302](https://redirect.github.com/googleapis/google-api-go-client/issues/3302))
([79b251a](https://redirect.github.com/googleapis/google-api-go-client/commit/79b251ae0fcbe4f34730ace80b89f43b529c192b))
- **all:** Auto-regenerate discovery clients
([#&#8203;3303](https://redirect.github.com/googleapis/google-api-go-client/issues/3303))
([e93c8a8](https://redirect.github.com/googleapis/google-api-go-client/commit/e93c8a870b9a43ac439c438d52df964da732df02))
- **all:** Auto-regenerate discovery clients
([#&#8203;3305](https://redirect.github.com/googleapis/google-api-go-client/issues/3305))
([1ca0330](https://redirect.github.com/googleapis/google-api-go-client/commit/1ca0330e52f234f3f9e9d65c431e0f9e7a2e93a0))

###
[`v0.248.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.248.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.247.0...v0.248.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3272](https://redirect.github.com/googleapis/google-api-go-client/issues/3272))
([8f03c8e](https://redirect.github.com/googleapis/google-api-go-client/commit/8f03c8e1e1b3efb0c821c588b47f8ee39d583d54))
- **all:** Auto-regenerate discovery clients
([#&#8203;3274](https://redirect.github.com/googleapis/google-api-go-client/issues/3274))
([2900298](https://redirect.github.com/googleapis/google-api-go-client/commit/29002988e83e0666a892a1978ad0e74452db367a))
- **all:** Auto-regenerate discovery clients
([#&#8203;3275](https://redirect.github.com/googleapis/google-api-go-client/issues/3275))
([4c66642](https://redirect.github.com/googleapis/google-api-go-client/commit/4c6664201ee89387dfcc307ad4daf2a31295398c))
- **all:** Auto-regenerate discovery clients
([#&#8203;3276](https://redirect.github.com/googleapis/google-api-go-client/issues/3276))
([2692170](https://redirect.github.com/googleapis/google-api-go-client/commit/2692170524bf53a5e5b97960d40da003b116d433))
- **all:** Auto-regenerate discovery clients
([#&#8203;3277](https://redirect.github.com/googleapis/google-api-go-client/issues/3277))
([23daa11](https://redirect.github.com/googleapis/google-api-go-client/commit/23daa11938631f73002200daa96f242e8c8e0a75))
- **all:** Auto-regenerate discovery clients
([#&#8203;3279](https://redirect.github.com/googleapis/google-api-go-client/issues/3279))
([71f2c5f](https://redirect.github.com/googleapis/google-api-go-client/commit/71f2c5fe1e2150b58accdc0584e71f897f15fcb7))
- **all:** Auto-regenerate discovery clients
([#&#8203;3280](https://redirect.github.com/googleapis/google-api-go-client/issues/3280))
([59f18fd](https://redirect.github.com/googleapis/google-api-go-client/commit/59f18fd7f2c6f48c3d2262ec6dd0e2f1538d43fa))

</details>

<details>
<summary>pylint-dev/pylint (pylint)</summary>

###
[`v3.3.9`](https://redirect.github.com/pylint-dev/pylint/releases/tag/v3.3.9)

[Compare
Source](https://redirect.github.com/pylint-dev/pylint/compare/v3.3.8...v3.3.9)

## What's new in Pylint 3.3.9?

Release date: 2025-10-05

## False Positives Fixed

- Fix used-before-assignment for PEP 695 type aliases and parameters.

Closes
[#&#8203;9815](https://redirect.github.com/pylint-dev/pylint/issues/9815)

- No longer flag undeprecated functions in `importlib.resources` as
deprecated.

Closes
[#&#8203;10593](https://redirect.github.com/pylint-dev/pylint/issues/10593)

- Fix false positive `inconsistent-return-statements` when using
`quit()` or `exit()` functions.

Closes
[#&#8203;10508](https://redirect.github.com/pylint-dev/pylint/issues/10508)

- Fix false positive `undefined-variable` (E0602) for for-loop variable
shadowing patterns like `for item in item:` when the variable was
previously defined.

Closes
[#&#8203;10562](https://redirect.github.com/pylint-dev/pylint/issues/10562)

## Other Bug Fixes

- Fixed crash in 'unnecessary-list-index-lookup' when starting an
enumeration using
minus the length of an iterable inside a dict comprehension when the len
call was only
made in this dict comprehension, and not elsewhere. Also changed the
approach,
to use inference in all cases but the simple ones, so we don't have to
fix crashes
  one by one for arbitrarily complex expressions in enumerate.

Closes
[#&#8203;10510](https://redirect.github.com/pylint-dev/pylint/issues/10510)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Author: renovate-bot

vulnfeeds/cmd/alpine/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
@@ -25,7 +25,7 @@ COPY ./ /src/
 RUN go build -o alpine-osv ./cmd/alpine/
 
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 
 WORKDIR /root/
 COPY --from=GO_BUILD /src/alpine-osv ./

vulnfeeds/cmd/combine-to-osv/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
@@ -26,7 +26,7 @@ RUN go build -o combine-to-osv ./cmd/combine-to-osv/
 RUN go build -o download-cves ./cmd/download-cves/
 
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 RUN apk --no-cache add jq
 
 WORKDIR /root/

vulnfeeds/cmd/cpe-repo-gen/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
@@ -24,7 +24,7 @@ RUN go mod download
 COPY ./ /src/
 RUN CGO_ENABLED=0 go build -o cpe-repo-gen ./cmd/cpe-repo-gen
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 
 RUN apk add --no-cache unzip
 

vulnfeeds/cmd/cve-bulk-converter/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS go_build
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS go_build
 
 RUN mkdir /src
 WORKDIR /src
@@ -25,7 +25,7 @@ RUN go mod download && go mod verify
 COPY ./ /src/
 RUN go build -o cve-bulk-converter ./cmd/cve-bulk-converter/
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 RUN apk --no-cache add jq
 
 WORKDIR /root/

vulnfeeds/cmd/debian-copyright-mirror/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 
 RUN apk add py3-yaml
 

vulnfeeds/cmd/debian/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
@@ -25,7 +25,7 @@ COPY ./ /src/
 RUN go build -o debian ./cmd/debian/
 
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 
 WORKDIR /root/
 COPY --from=GO_BUILD /src/debian ./

vulnfeeds/cmd/download-cves/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 RUN mkdir /src
 WORKDIR /src
@@ -24,7 +24,7 @@ RUN go mod download
 COPY ./ /src/
 RUN go build -o download-cves ./cmd/download-cves/
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 
 WORKDIR /usr/local/bin
 COPY --from=GO_BUILD /src/download-cves ./

vulnfeeds/cmd/nvd-cve-osv/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.25.3-alpine@sha256:aee43c3ccbf24fdffb7295693b6e33b21e01baec1b2a55acc351fde345e9ec34 AS GO_BUILD
+FROM golang:1.25.4-alpine@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS GO_BUILD
 
 WORKDIR /go/src
 
@@ -22,7 +22,7 @@ RUN go mod download && go mod verify
 COPY . .
 RUN CGO_ENABLED=0 go build -v -o /usr/local/bin ./cmd/nvd-cve-osv ./cmd/download-cves
 
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:cdac858d976cb0e6bfdc3288fee5a0a7bf6348a009089be130b2009e28463c52
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:080b442ad8ade79dd3c159fd89319dcccdb2d868e1c4e548267f3006fb0268f4
 RUN apk --no-cache add jq
 
 COPY --from=GO_BUILD /usr/local/bin/ ./usr/local/bin/

vulnfeeds/go.mod

@@ -1,21 +1,21 @@
 module github.com/google/osv/vulnfeeds
 
-go 1.25.3
+go 1.25.4
 
 require (
-	cloud.google.com/go/secretmanager v1.15.0
-	cloud.google.com/go/storage v1.57.0
+	cloud.google.com/go/secretmanager v1.16.0
+	cloud.google.com/go/storage v1.57.1
 	github.com/aquasecurity/go-pep440-version v0.0.1
 	github.com/atombender/go-jsonschema v0.20.0
 	github.com/charmbracelet/lipgloss v1.1.0
-	github.com/gkampitakis/go-snaps v0.5.7
-	github.com/go-git/go-git/v5 v5.16.2
+	github.com/gkampitakis/go-snaps v0.5.15
+	github.com/go-git/go-git/v5 v5.16.3
 	github.com/google/go-cmp v0.7.0
 	github.com/google/osv-scanner v1.9.2
 	github.com/knqyf263/go-cpe v0.0.0-20230627041855-cb0794d06872
-	github.com/ossf/osv-schema/bindings/go v0.0.0-20251027003933-3d1fb541b2bf
+	github.com/ossf/osv-schema/bindings/go v0.0.0-20251112210320-9fb6c8870ac1
 	github.com/sethvargo/go-retry v0.3.0
-	google.golang.org/api v0.247.0
+	google.golang.org/api v0.256.0
 	google.golang.org/protobuf v1.36.10
 	gopkg.in/dnaeon/go-vcr.v4 v4.0.5
 	gopkg.in/yaml.v2 v2.4.0
@@ -24,13 +24,13 @@ require (
 require (
 	cel.dev/expr v0.24.0 // indirect
 	cloud.google.com/go v0.121.6 // indirect
-	cloud.google.com/go/auth v0.16.5 // indirect
+	cloud.google.com/go/auth v0.17.0 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
-	cloud.google.com/go/compute/metadata v0.8.0 // indirect
+	cloud.google.com/go/compute/metadata v0.9.0 // indirect
 	cloud.google.com/go/iam v1.5.2 // indirect
 	cloud.google.com/go/monitoring v1.24.2 // indirect
 	dario.cat/mergo v1.0.2 // indirect
-	github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 // indirect
+	github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0 // indirect
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0 // indirect
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.53.0 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
@@ -49,18 +49,18 @@ require (
 	github.com/envoyproxy/go-control-plane/envoy v1.32.4 // indirect
 	github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
-	github.com/gkampitakis/ciinfo v0.3.0 // indirect
+	github.com/gkampitakis/ciinfo v0.3.2 // indirect
 	github.com/gkampitakis/go-diff v1.3.2 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
 	github.com/go-git/go-billy/v5 v5.6.2 // indirect
-	github.com/go-jose/go-jose/v4 v4.0.5 // indirect
+	github.com/go-jose/go-jose/v4 v4.1.2 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
 	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 	github.com/google/s2a-go v0.1.9 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.3.7 // indirect
 	github.com/googleapis/gax-go/v2 v2.15.0 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
 	github.com/kevinburke/ssh_config v1.2.0 // indirect
@@ -91,23 +91,23 @@ require (
 	go.opentelemetry.io/contrib/detectors/gcp v1.36.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 // indirect
-	go.opentelemetry.io/otel v1.36.0 // indirect
-	go.opentelemetry.io/otel/metric v1.36.0 // indirect
-	go.opentelemetry.io/otel/sdk v1.36.0 // indirect
-	go.opentelemetry.io/otel/sdk/metric v1.36.0 // indirect
-	go.opentelemetry.io/otel/trace v1.36.0 // indirect
-	golang.org/x/crypto v0.41.0 // indirect
+	go.opentelemetry.io/otel v1.37.0 // indirect
+	go.opentelemetry.io/otel/metric v1.37.0 // indirect
+	go.opentelemetry.io/otel/sdk v1.37.0 // indirect
+	go.opentelemetry.io/otel/sdk/metric v1.37.0 // indirect
+	go.opentelemetry.io/otel/trace v1.37.0 // indirect
+	golang.org/x/crypto v0.43.0 // indirect
 	golang.org/x/exp v0.0.0-20250819193227-8b4c13bb791b // indirect
-	golang.org/x/net v0.43.0 // indirect
-	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sync v0.16.0 // indirect
-	golang.org/x/sys v0.35.0 // indirect
-	golang.org/x/text v0.28.0 // indirect
-	golang.org/x/time v0.12.0 // indirect
+	golang.org/x/net v0.46.0 // indirect
+	golang.org/x/oauth2 v0.33.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.37.0 // indirect
+	golang.org/x/text v0.30.0 // indirect
+	golang.org/x/time v0.14.0 // indirect
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
 	google.golang.org/genproto v0.0.0-20250603155806-513f23925822 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250818200422-3122310a409c // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c // indirect
-	google.golang.org/grpc v1.74.3 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101 // indirect
+	google.golang.org/grpc v1.76.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 )