[dependabot]

Bumps the go-modules group with 4 updates: github.com/Microsoft/go-winio, github.com/containerd/containerd/v2, github.com/klauspost/pgzip and google.golang.org/api.

Updates github.com/Microsoft/go-winio from 0.6.3 to 0.6.4

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.4

What's Changed

• Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @​dependabot[bot] in microsoft/go-winio#393
• Fix regression in mkwinsyscall for non SystemDLLs by @​jterry75 in microsoft/go-winio#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

Commits

• b900fd8 Fix regression in mkwinsyscall for non SystemDLLs (#394)
• 48c993a Bump golang.org/x/sys from 0.48.0 to 0.49.0 (#393)
• See full diff in compare view

Updates github.com/containerd/containerd/v2 from 2.4.1 to 2.4.2

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.4.2

Welcome to the v2.4.2 release of containerd!

The second patch release for containerd 2.4 contains various fixes and updates including security patches.

Security Updates

• containerd
  • CVE-2026-95839
  • GHSA-8647-2jxj-p2rc
  • GHSA-hc94-p972-ch66

Highlights

Container Runtime Interface (CRI)

• Apply hardening to not follow symlinks for container log files (#14302)

Image Distribution

• Fix excessive memory usage during image pulls when registry downloads outpace content writes (#14342)
• Apply hardening to reject image references with ".." path components (#14282)

Runtime

• Apply hardening to allowlist socket domains in the default seccomp profile (#14247)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Maksym Pavlenko
• Sebastiaan van Stijn
• Derek McGowan
• LEI WANG
• Paweł Gronowski
• Phil Estes
• Wei Fu
• syed abdul khaliq

Changes

• 4b342aeaf Prepare release notes for v2.4.2
• Update to go1.26.9 / go1.27.2 (security) (#14350)
  • 9c06c813e Update to go1.26.9 / go1.27.2

... (truncated)

Commits

• b7a2526 Merge pull request #14338 from samuelkarp/prepare-release-2.4.2
• 4b342ae Prepare release notes for v2.4.2
• b5811e5 Merge pull request #14350 from thaJeztah/2.4_bump_go
• 1d734f7 Merge pull request #14347 from k8s-infra-cherrypick-robot/cherry-pick-14346-t...
• 9c06c81 Update to go1.26.9 / go1.27.2
• 187caba Merge commit from fork
• fc7adbf Merge commit from fork
• 39cff48 Merge commit from fork
• 3fb9faa ci: update to golangci-lint v2.14.0 (go1.27.2 compatibility)
• 44fd201 remotes/docker: bound parallel fetch readers
• Additional commits viewable in compare view

Updates github.com/klauspost/pgzip from 1.2.7 to 1.3.0

Release notes

Sourced from github.com/klauspost/pgzip's releases.

v1.3.0

What's Changed

• feat: Parallel zlib writer implementation by @​AdamMagued in klauspost/pgzip#75
• fix: reset read offset when Read drains the current block by @​stefanfrede in klauspost/pgzip#76
• Return unexpected EOF if the stream misses its CRC trailer by @​apostasie in klauspost/pgzip#78
• Upgrade compress by @​klauspost in klauspost/pgzip#79

New Contributors

• @​stefanfrede made their first contribution in klauspost/pgzip#76
• @​apostasie made their first contribution in klauspost/pgzip#78
• @​AdamMagued made their first contribution in klauspost/pgzip#75

Full Changelog: klauspost/pgzip@v1.2.7...v1.3.0

Commits

• 03eeed3 feat: Parallel zlib writer implementation (#75)
• 4e456ca Upgrade compress (#79)
• 172a0d6 Return unexpected EOF if the stream misses its CRC trailer (#78)
• e1b5b31 fix: reset read offset when Read drains the current block (#76)
• See full diff in compare view

Updates google.golang.org/api from 0.302.0 to 0.303.0

Release notes

Sourced from google.golang.org/api's releases.

v0.303.0

0.303.0 (2026-10-13)

Features

• all: Auto-regenerate discovery clients (#3768) (38ac60a)

Changelog

Sourced from google.golang.org/api's changelog.

0.303.0 (2026-10-13)

Features

• all: Auto-regenerate discovery clients (#3768) (38ac60a)

Commits

• 66158c0 chore(main): release 0.303.0 (#3769)
• 38ac60a feat(all): auto-regenerate discovery clients (#3768)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.