fix(deps): update module github.com/google/go-containerregistry to v0.21.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/go-containerregistry	v0.21.3 → v0.21.5

---

Release Notes

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.5

Compare Source

What's Changed

• Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by @​thaJeztah in #​2254
• update to Go 1.26.2 by @​thaJeztah in #​2255
• Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by @​dependabot[bot] in #​2257
• build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by @​dependabot[bot] in #​2260

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

v0.21.4

Compare Source

What's Changed

• go.mod: do not make a viral minimum go version by @​howardjohn in #​2237
• Avoid pruning absolute links from extracted and flattened images by @​Subserial in #​2241
• Bump the go-deps group across 3 directories with 5 updates by @​dependabot[bot] in #​2245
• fix: update to go1.25.8, and use separate .go-version file by @​thaJeztah in #​2246
• Bump CI go version to 1.26.1 by @​Subserial in #​2242
• Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by @​dependabot[bot] in #​2240
• fork distribution client v3 auth-challenge as an internal package (squashed) by @​thaJeztah in #​2248
• transport: validate Bearer realm URL to prevent SSRF by @​evilgensec in #​2243
• revert path traversal and symlink escape from #​2227 by @​Subserial in #​2250
• Fix pkg/v1/google/auth tests for arm64 by @​Subserial in #​2085
• goreleaser: Update goreleaser config and GH action by @​Subserial in #​2253

New Contributors

• @​evilgensec made their first contribution in #​2243

Full Changelog: google/go-containerregistry@v0.21.3...v0.21.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
golang.org/x/text	v0.35.0 -> v0.36.0
github.com/docker/cli	v29.3.0+incompatible -> v29.4.0+incompatible
github.com/klauspost/compress	v1.18.4 -> v1.18.5
golang.org/x/crypto	v0.49.0 -> v0.50.0
golang.org/x/mod	v0.34.0 -> v0.35.0
golang.org/x/net	v0.52.0 -> v0.53.0
golang.org/x/sys	v0.42.0 -> v0.43.0
golang.org/x/term	v0.41.0 -> v0.42.0
golang.org/x/tools	v0.43.0 -> v0.44.0