Bump the go-modules group with 12 updates

[dependabot]

Bumps the go-modules group with 12 updates:

Package	From	To
github.com/getsops/sops/v3	3.13.2	3.13.3
k8s.io/api	0.36.2	0.36.3
k8s.io/apiextensions-apiserver	0.36.2	0.36.3
k8s.io/apimachinery	0.36.2	0.36.3
k8s.io/cli-runtime	0.36.2	0.36.3
k8s.io/client-go	0.36.2	0.36.3
k8s.io/code-generator	0.36.2	0.36.3
k8s.io/kube-aggregator	0.36.2	0.36.3
k8s.io/kube-proxy	0.36.2	0.36.3
k8s.io/kubectl	0.36.2	0.36.3
k8s.io/kubelet	0.36.2	0.36.3
k8s.io/kubernetes	1.36.2	1.36.3

Updates github.com/getsops/sops/v3 from 3.13.2 to 3.13.3

Release notes

Sourced from github.com/getsops/sops/v3's releases.

v3.13.3

Installation

To install sops, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.linux.amd64
Move the binary in to your PATH
mv sops-v3.13.3.linux.amd64 /usr/local/bin/sops
Make the binary executable
chmod +x /usr/local/bin/sops

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.checksums.sigstore.json
Verify the checksums file
cosign verify-blob sops-v3.13.3.checksums.txt 
--bundle sops-v3.13.3.checksums.sigstore.json 
--certificate-identity-regexp=https://github.com/getsops 
--certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

# Verify the binary using the checksums file
sha256sum -c sops-v3.13.3.checksums.txt --ignore-missing

Verify artifact provenance

The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named sops-v3.13.3.intoto.jsonl. To verify the provenance of an artifact, you can utilize the slsa-verifier tool:

# Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.intoto.jsonl
</tr></table> 

... (truncated)

Changelog

Sourced from github.com/getsops/sops/v3's changelog.

3.13.3

Improvements:

• CLI help improvement (#2239).
• Dependency updates (#2242, #2251, #2261, #2248).

Bugfixes:

• Fix a bug introduced in 3.13.2 that computes a wrong MAC during decryption for sequences (YAML lists) that contain a comment (#2245).
• Fix completion subcommands so that they do not have an empty line before the shebang (#2253).

Project changes:

• CI dependency updates (#2241, #2250, #2260).
• Rust dependency updates for functional tests (#2259).

Commits

• 26e2f47 Merge pull request #2249 from felixfontein/release-3.13.3
• 357de8a Fix old changelog.
• 73f38b8 Add changelog.
• 74428b6 Bump version to 3.13.3.
• f5fe6ab Merge pull request #2253 from felixfontein/completion
• 238f71b Remove leading newline.
• 5a745f3 Merge pull request #2248 from felixfontein/deps
• f406e83 Update dependencies with 'go get -t -u ./...'.
• 7149e91 Merge pull request #2259 from getsops/dependabot/cargo/functional-tests/rust-...
• fefb6ee build(deps): Bump the rust group in /functional-tests with 3 updates
• Additional commits viewable in compare view

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits

• 3fde3c4 Update dependencies to v0.36.3 tag
• 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.2 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/cli-runtime from 0.36.2 to 0.36.3

Commits

• a39fac4 Update dependencies to v0.36.3 tag
• 88a785e Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1706906 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/code-generator from 0.36.2 to 0.36.3

Commits

• f4c4331 Update dependencies to v0.36.3 tag
• f2be266 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 415a84d Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/kube-aggregator from 0.36.2 to 0.36.3

Commits

• 08f9497 Update dependencies to v0.36.3 tag
• 6428248 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 7de9fef Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/kube-proxy from 0.36.2 to 0.36.3

Commits

• 5bfb40f Update dependencies to v0.36.3 tag
• 76267a8 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 43529c4 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/kubectl from 0.36.2 to 0.36.3

Commits

• 73fdc7a Update dependencies to v0.36.3 tag
• 58802ae Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• fde8e27 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/kubelet from 0.36.2 to 0.36.3

Commits

• bbb4f8f Update dependencies to v0.36.3 tag
• cfd73d4 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 47a9920 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/kubernetes from 1.36.2 to 1.36.3

Release notes

Sourced from k8s.io/kubernetes's releases.

v1.36.3

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Commits

• 0f29094 Release commit for Kubernetes v1.36.3
• 8ba6370 Merge pull request #140581 from palnabarun/bump-go-1.36
• cc4f7df Merge pull request #140663 from thc1006/dra/release-reserved-counters-backpor...
• dec683b Merge pull request #140322HirazawaUi/automated-cherry-pick-of-#140163
• 9419ebe Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 5874ee7 DRA: roll back reserved state in allocateDevice
• 2c14a99 Bump images and versions to golang 1.26.5 and update distroless-iptables
• fb2467e stop logging missing optional container annotations
• 4434901 Add e2e test for setting maps and slices to null via SSA
• f015292 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.