test(deps): update dependency apko to v1.2.41 (main)

[renovate]

This PR contains the following updates:

Package	Update	Change
apko	patch	1.2.36 → 1.2.41

---

Release Notes

chainguard-dev/apko (apko)

v1.2.41

Compare Source

Changelog

• 326edce apk: expose cache metrics (#​2435)
• d7ffba3 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.31 to 1.6.32 (#​2421)
• aeedd74 build(deps): bump chainguard.dev/sdk from 0.1.197 to 0.1.204 (#​2425)
• c0b1316 build(deps): bump chainguard.dev/sdk from 0.1.204 to 0.1.210 (#​2428)
• c89724f build(deps): bump chainguard.dev/sdk from 0.1.210 to 0.1.212 (#​2434)
• a2e35ac build(deps): bump github.com/package-url/packageurl-go from 0.1.6 to 0.1.7 (#​2430)
• e202915 build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#​2419)
• 5eab44e build(deps): bump go.step.sm/crypto from 0.88.0 to 0.89.0 (#​2424)
• de11e49 build(deps): bump k8s.io/apimachinery from 0.36.3 to 0.36.4 (#​2429)
• 1520c60 build(deps): bump step-security/action-actionlint from 1.72.0 to 1.73.1 (#​2420)
• 51d37b4 build(deps): bump the codeql group with 2 updates (#​2431)
• 883c5ad fix(apk): stop racing on the shared indexOpts authenticator (#​2432)
• 6a223c2 go1.27 (#​2427)

v1.2.40

Compare Source

Changelog

• d1b5d5e erofs: add 'apko erofs mount' and 'apko erofs umount' (#​2415)

v1.2.39

Compare Source

Changelog

• 351252d build: make WithAnnotations and WithFormat order-independent (#​2413)
• 302ff3c erofs: add a privileged CI job that mounts a layer (#​2414)
• 25f7e68 fix(oci): tolerate an unreadable config when building the index (#​2416)

v1.2.38: apko 1.2.38

Compare Source

What's Changed

• build(deps): bump chainguard.dev/sdk from 0.1.184 to 0.1.191 by @​dependabot[bot] in #​2398
• build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @​dependabot[bot] in #​2401
• build(deps): bump google.golang.org/api from 0.292.0 to 0.293.0 by @​dependabot[bot] in #​2402
• build(deps): bump the codeql group with 2 updates by @​dependabot[bot] in #​2404
• build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 by @​dependabot[bot] in #​2405
• build(deps): bump chainguard.dev/sdk from 0.1.191 to 0.1.197 by @​dependabot[bot] in #​2403
• Add erofs support to apko. by @​smoser in #​2249
• build(deps): bump go.step.sm/crypto from 0.87.0 to 0.88.0 by @​dependabot[bot] in #​2409
• Bump go-erofs import to current main. by @​smoser in #​2412
• Makefile: fix make lint, reading its version from CI by @​smoser in #​2411
• erofs: first batch of #​2408 follow-ups by @​smoser in #​2410

[edit] ⚠️ Contains Regression (#​2417 library only): GenerateIndex/GenerateDockerIndex fail with failed to get config file when passed a v1.Image that can't serve its config (introduced by #​2249). The apko CLI is unaffected. Pin v1.2.37 or see #​2416

Full Changelog: chainguard-dev/apko@v1.2.37...v1.2.38

v1.2.37

Compare Source

Changelog

• 47ec388 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.30 to 1.6.31 (#​2396)
• e669022 build(deps): bump chainguard.dev/sdk from 0.1.170 to 0.1.184 (#​2394)
• bf7cab9 build(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 (#​2391)
• 7f1606c build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 (#​2393)
• 5bf3f6b build(deps): bump google.golang.org/api from 0.291.0 to 0.292.0 (#​2392)
• c9d67cb certificates: also add kaniko certs (#​2395)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.