Update containers/image, oras-go, and docker (#1411)

* chore(deps): bump github.com/containers/image/v5 from 5.25.0 to 5.29.0

Bumps [github.com/containers/image/v5](https://github.com/containers/image) from 5.25.0 to 5.29.0.
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.25.0...v5.29.0)

---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* regenerate files

* bump oras-go

* changes from 'make test'

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

examples/sdk/helm-template/go.mod

@@ -14,7 +14,7 @@ require (
 )
 
 require (
- github.com/BurntSushi/toml v1.2.1 // indirect
+ github.com/BurntSushi/toml v1.3.2 // indirect
  github.com/Masterminds/goutils v1.1.1 // indirect
  github.com/Masterminds/semver/v3 v3.2.1 // indirect
  github.com/Masterminds/sprig/v3 v3.2.3 // indirect
@@ -24,7 +24,7 @@ require (
  github.com/go-logr/logr v1.2.4 // indirect
  github.com/go-openapi/jsonpointer v0.19.6 // indirect
  github.com/go-openapi/jsonreference v0.20.2 // indirect
- github.com/go-openapi/swag v0.22.3 // indirect
+ github.com/go-openapi/swag v0.22.4 // indirect
  github.com/gobwas/glob v0.2.3 // indirect
  github.com/gogo/protobuf v1.3.2 // indirect
  github.com/golang/protobuf v1.5.3 // indirect
@@ -49,13 +49,13 @@ require (
  github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
  github.com/xeipuuv/gojsonschema v1.2.0 // indirect
  golang.org/x/crypto v0.17.0 // indirect
- golang.org/x/net v0.17.0 // indirect
- golang.org/x/oauth2 v0.12.0 // indirect
+ golang.org/x/net v0.18.0 // indirect
+ golang.org/x/oauth2 v0.14.0 // indirect
  golang.org/x/sys v0.15.0 // indirect
  golang.org/x/term v0.15.0 // indirect
  golang.org/x/text v0.14.0 // indirect
  golang.org/x/time v0.3.0 // indirect
- google.golang.org/appengine v1.6.7 // indirect
+ google.golang.org/appengine v1.6.8 // indirect
  google.golang.org/protobuf v1.31.0 // indirect
  gopkg.in/inf.v0 v0.9.1 // indirect
  gopkg.in/yaml.v2 v2.4.0 // indirect

examples/sdk/helm-template/go.sum

@@ -1,5 +1,6 @@
 github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak=
 github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
+github.com/BurntSushi/toml v1.3.2/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
 github.com/Masterminds/goutils v1.1.1 h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI=
 github.com/Masterminds/goutils v1.1.1/go.mod h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=
 github.com/Masterminds/semver/v3 v3.2.0/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ=
@@ -26,13 +27,15 @@ github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2Kv
 github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
 github.com/go-openapi/swag v0.22.3 h1:yMBqmnQ0gyZvEb/+KzuWZOXgllrXT4SADYbvDaXHv/g=
 github.com/go-openapi/swag v0.22.3/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
+github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
 github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=
 github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
@@ -134,8 +137,10 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.17.0 h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
+golang.org/x/net v0.18.0/go.mod h1:/czyP5RqHAH4odGYxBJ1qz0+CE5WZ+2j1YgoEo8F2jQ=
 golang.org/x/oauth2 v0.12.0 h1:smVPGxink+n1ZI5pkQa8y6fZT0RW0MgCO5bFpepy4B4=
 golang.org/x/oauth2 v0.12.0/go.mod h1:A74bZ3aGXgCY0qaIC9Ahg6Lglin4AMAco8cIv9baba4=
+golang.org/x/oauth2 v0.14.0/go.mod h1:lAtNWgaWfL4cm7j2OV8TxGi9Qb7ECORx8DktCY74OwM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -159,6 +164,7 @@ golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
@@ -176,6 +182,7 @@ golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8T
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
 google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds=
 google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
 google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
 google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=

go.mod

@@ -6,7 +6,7 @@ require (
  github.com/ahmetalpbalkan/go-cursor v0.0.0-20131010032410-8136607ea412
  github.com/apparentlymart/go-cidr v1.1.0
  github.com/blang/semver/v4 v4.0.0
- github.com/containers/image/v5 v5.25.0
+ github.com/containers/image/v5 v5.29.0
  github.com/distribution/distribution/v3 v3.0.0-20221208165359-362910506bc2
  github.com/fatih/color v1.15.0
  github.com/go-logr/logr v1.2.4
@@ -25,7 +25,7 @@ require (
  github.com/mattn/go-isatty v0.0.19
  github.com/mholt/archiver/v3 v3.5.1
  github.com/microsoft/go-mssqldb v1.6.0
- github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
+ github.com/opencontainers/image-spec v1.1.0-rc5
  github.com/pkg/errors v0.9.1
  github.com/replicatedhq/termui/v3 v3.1.1-0.20200811145416-f40076d26851
  github.com/segmentio/ksuid v1.0.4
@@ -38,9 +38,9 @@ require (
  github.com/vmware-tanzu/velero v1.12.0
  go.opentelemetry.io/otel v1.19.0
  go.opentelemetry.io/otel/sdk v1.19.0
- golang.org/x/exp v0.0.0-20230905200255-921286631fa9
- golang.org/x/mod v0.12.0
- golang.org/x/sync v0.4.0
+ golang.org/x/exp v0.0.0-20231006140011-7918f672742d
+ golang.org/x/mod v0.13.0
+ golang.org/x/sync v0.5.0
  gopkg.in/yaml.v2 v2.4.0
  k8s.io/api v0.28.2
  k8s.io/apiextensions-apiserver v0.28.1
@@ -49,13 +49,14 @@ require (
  k8s.io/cli-runtime v0.28.2
  k8s.io/client-go v0.28.2
  k8s.io/klog/v2 v2.100.1
- oras.land/oras-go v1.2.3
+ oras.land/oras-go v1.2.4
  sigs.k8s.io/controller-runtime v0.16.2
  sigs.k8s.io/e2e-framework v0.3.0
 )
 
 require (
  cloud.google.com/go/compute/metadata v0.2.3 // indirect
+ dario.cat/mergo v1.0.0 // indirect
  github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
  github.com/MakeNowJust/heredoc v1.0.0 // indirect
  github.com/Masterminds/goutils v1.1.1 // indirect
@@ -64,9 +65,11 @@ require (
  github.com/Masterminds/squirrel v1.5.4 // indirect
  github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
  github.com/chai2010/gettext-go v1.0.2 // indirect
+ github.com/containerd/cgroups/v3 v3.0.2 // indirect
  github.com/containerd/log v0.1.0 // indirect
  github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
- github.com/docker/distribution v2.8.2+incompatible // indirect
+ github.com/distribution/reference v0.5.0 // indirect
+ github.com/docker/distribution v2.8.3+incompatible // indirect
  github.com/emicklei/go-restful/v3 v3.10.2 // indirect
  github.com/evanphx/json-patch/v5 v5.6.0 // indirect
  github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
@@ -75,6 +78,7 @@ require (
  github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9 // indirect
  github.com/golang-sql/sqlexp v0.1.0 // indirect
  github.com/google/gnostic-models v0.6.8 // indirect
+ github.com/google/go-containerregistry v0.16.1 // indirect
  github.com/google/s2a-go v0.1.7 // indirect
  github.com/googleapis/enterprise-certificate-proxy v0.3.1 // indirect
  github.com/gosuri/uitable v0.0.4 // indirect
@@ -98,7 +102,7 @@ require (
  github.com/shopspring/decimal v1.3.1 // indirect
  github.com/sirupsen/logrus v1.9.3 // indirect
  github.com/sourcegraph/conc v0.3.0 // indirect
- github.com/sylabs/sif/v2 v2.11.1 // indirect
+ github.com/sylabs/sif/v2 v2.15.0 // indirect
  github.com/tchap/go-patricia/v2 v2.3.1 // indirect
  github.com/vladimirvivien/gexe v0.2.0 // indirect
  github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
@@ -108,7 +112,7 @@ require (
  go.opentelemetry.io/otel/metric v1.19.0 // indirect
  go.opentelemetry.io/otel/trace v1.19.0 // indirect
  go.uber.org/multierr v1.11.0 // indirect
- golang.org/x/tools v0.13.0 // indirect
+ golang.org/x/tools v0.14.0 // indirect
  google.golang.org/genproto/googleapis/api v0.0.0-20230913181813-007df8e322eb // indirect
  google.golang.org/genproto/googleapis/rpc v0.0.0-20230920204549-e6e6cdab5c13 // indirect
  k8s.io/component-base v0.28.1 // indirect
@@ -121,27 +125,26 @@ require (
  cloud.google.com/go/iam v1.1.1 // indirect
  cloud.google.com/go/storage v1.30.1 // indirect
  github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
- github.com/BurntSushi/toml v1.2.1 // indirect
+ github.com/BurntSushi/toml v1.3.2 // indirect
  github.com/Microsoft/go-winio v0.6.1 // indirect
- github.com/Microsoft/hcsshim v0.11.4 // indirect
+ github.com/Microsoft/hcsshim v0.12.0-rc.1 // indirect
  github.com/andybalholm/brotli v1.0.1 // indirect
  github.com/aws/aws-sdk-go v1.44.253 // indirect
  github.com/beorn7/perks v1.0.1 // indirect
  github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
  github.com/c9s/goprocinfo v0.0.0-20170724085704-0010a05ce49f // indirect
  github.com/cespare/xxhash/v2 v2.2.0 // indirect
  github.com/chzyer/readline v1.5.1 // indirect
- github.com/containerd/cgroups v1.1.0 // indirect
  github.com/containerd/containerd v1.7.11 // indirect
- github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
+ github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
  github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
- github.com/containers/ocicrypt v1.1.7 // indirect
- github.com/containers/storage v1.46.0 // indirect
+ github.com/containers/ocicrypt v1.1.9 // indirect
+ github.com/containers/storage v1.51.0 // indirect
  github.com/cyphar/filepath-securejoin v0.2.4 // indirect
  github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
- github.com/docker/cli v23.0.3+incompatible // indirect
- github.com/docker/docker v23.0.3+incompatible // indirect
- github.com/docker/docker-credential-helpers v0.7.0 // indirect
+ github.com/docker/cli v24.0.7+incompatible // indirect
+ github.com/docker/docker v24.0.7+incompatible // indirect
+ github.com/docker/docker-credential-helpers v0.8.0 // indirect
  github.com/docker/go-connections v0.4.0 // indirect
  github.com/docker/go-metrics v0.0.1 // indirect
  github.com/docker/go-units v0.5.0 // indirect
@@ -153,7 +156,7 @@ require (
  github.com/go-ole/go-ole v1.2.6 // indirect
  github.com/go-openapi/jsonpointer v0.19.6 // indirect
  github.com/go-openapi/jsonreference v0.20.2 // indirect
- github.com/go-openapi/swag v0.22.3 // indirect
+ github.com/go-openapi/swag v0.22.4 // indirect
  github.com/gogo/protobuf v1.3.2 // indirect
  github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
  github.com/golang/protobuf v1.5.3 // indirect
@@ -175,13 +178,13 @@ require (
  github.com/jmespath/go-jmespath v0.4.0 // indirect
  github.com/josharian/intern v1.0.0 // indirect
  github.com/json-iterator/go v1.1.12 // indirect
- github.com/klauspost/compress v1.17.0 // indirect
- github.com/klauspost/pgzip v1.2.6-0.20220930104621-17e8dac29df8 // indirect
+ github.com/klauspost/compress v1.17.3 // indirect
+ github.com/klauspost/pgzip v1.2.6 // indirect
  github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
  github.com/magiconair/properties v1.8.7 // indirect
  github.com/mailru/easyjson v0.7.7 // indirect
  github.com/mattn/go-colorable v0.1.13 // indirect
- github.com/mattn/go-runewidth v0.0.14 // indirect
+ github.com/mattn/go-runewidth v0.0.15 // indirect
  github.com/mattn/go-shellwords v1.0.12 // indirect
  github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
  github.com/mitchellh/go-homedir v1.1.0 // indirect
@@ -190,8 +193,8 @@ require (
  github.com/mitchellh/mapstructure v1.5.0 // indirect
  github.com/moby/locker v1.0.1 // indirect
  github.com/moby/spdystream v0.2.0 // indirect
- github.com/moby/sys/mountinfo v0.6.2 // indirect
- github.com/moby/term v0.0.0-20221205130635-1aeaba878587 // indirect
+ github.com/moby/sys/mountinfo v0.7.1 // indirect
+ github.com/moby/term v0.5.0 // indirect
  github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
  github.com/modern-go/reflect2 v1.0.2 // indirect
  github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
@@ -200,18 +203,18 @@ require (
  github.com/nsf/termbox-go v0.0.0-20190121233118-02980233997d // indirect
  github.com/nwaples/rardecode v1.1.2 // indirect
  github.com/opencontainers/go-digest v1.0.0 // indirect
- github.com/opencontainers/runc v1.1.5 // indirect
- github.com/opencontainers/runtime-spec v1.1.0-rc.1 // indirect
+ github.com/opencontainers/runc v1.1.10 // indirect
+ github.com/opencontainers/runtime-spec v1.1.0 // indirect
  github.com/opencontainers/selinux v1.11.0 // indirect
  github.com/ostreedev/ostree-go v0.0.0-20210805093236-719684c64e4f // indirect
  github.com/pelletier/go-toml/v2 v2.1.0 // indirect
  github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
  github.com/pierrec/lz4/v4 v4.1.2 // indirect
  github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
- github.com/prometheus/client_golang v1.16.0 // indirect
- github.com/prometheus/client_model v0.4.0 // indirect
+ github.com/prometheus/client_golang v1.17.0 // indirect
+ github.com/prometheus/client_model v0.5.0 // indirect
  github.com/prometheus/common v0.44.0 // indirect
- github.com/prometheus/procfs v0.10.1 // indirect
+ github.com/prometheus/procfs v0.11.1 // indirect
  github.com/rivo/uniseg v0.4.4 // indirect
  github.com/spf13/afero v1.10.0 // indirect
  github.com/spf13/cast v1.5.1 // indirect
@@ -220,22 +223,22 @@ require (
  github.com/tklauser/go-sysconf v0.3.12 // indirect
  github.com/tklauser/numcpus v0.6.1 // indirect
  github.com/ulikunitz/xz v0.5.11 // indirect
- github.com/vbatts/tar-split v0.11.3 // indirect
+ github.com/vbatts/tar-split v0.11.5 // indirect
  github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
  github.com/xlab/treeprint v1.2.0 // indirect
  github.com/yusufpapurcu/wmi v1.2.3 // indirect
  go.opencensus.io v0.24.0 // indirect
  go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
  golang.org/x/crypto v0.17.0 // indirect
- golang.org/x/net v0.17.0
- golang.org/x/oauth2 v0.12.0 // indirect
+ golang.org/x/net v0.18.0
+ golang.org/x/oauth2 v0.14.0 // indirect
  golang.org/x/sys v0.15.0 // indirect
  golang.org/x/term v0.15.0 // indirect
  golang.org/x/text v0.14.0
  golang.org/x/time v0.3.0 // indirect
  golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
  google.golang.org/api v0.143.0 // indirect
- google.golang.org/appengine v1.6.7 // indirect
+ google.golang.org/appengine v1.6.8 // indirect
  google.golang.org/genproto v0.0.0-20230913181813-007df8e322eb // indirect
  google.golang.org/grpc v1.58.3 // indirect
  google.golang.org/protobuf v1.31.0 // indirect