chore(deps): update docker (main)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/docker/cli	indirect	patch	v29.4.0+incompatible -> v29.4.1+incompatible
github.com/docker/docker-credential-helpers	indirect	patch	v0.9.5 -> v0.9.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

docker/cli (github.com/docker/cli)

v29.4.1+incompatible

Compare Source

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.6

Compare Source

What's Changed

• update to go1.25.9
• secretservice: allow building on openbsd
• wincred: minor cleanups
• Dockerfile: document build-args
• Dockerfile: update golangci-lint to v2.11
• Dockerfile: update xx to v1.9.0
• ci: set default permissions and timeouts
• ci: update actions
• ci: pin actions by sha
• ci: add zizmor workflow

Full Changelog: docker/docker-credential-helpers@v0.9.5...v0.9.6

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-22 22:47 UTC · Rule: default
• ✅ Checks started · on draft merge queue: embarking main (7b7cbc9) and #4821 together #4958
• 🚫 Left the queue — 2026-04-22 23:20 UTC · at f2fd58759fac10358caa98d9509941dd8f03de7e

This pull request spent 33 minutes 48 seconds in the queue, with no time running CI.

Waiting for:

• check-success=Lint
• check-success=Manifest Tests
• check-success=Package Cloudbeat (docker)
• check-success=Package Cloudbeat (tar.gz)
• check-success=Test Rego Policies
• check-success=Unit Test
• any of:
  • check-neutral = CLA
  • check-skipped = CLA
  • check-success = CLA
• any of:
  • check-neutral = Package Cloudbeat (docker)
  • check-skipped = Package Cloudbeat (docker)
  • check-success = Package Cloudbeat (docker)
• any of:
  • check-neutral = Package Cloudbeat (tar.gz)
  • check-skipped = Package Cloudbeat (tar.gz)
  • check-success = Package Cloudbeat (tar.gz)
• any of:
  • check-neutral = Manifest Tests
  • check-skipped = Manifest Tests
  • check-success = Manifest Tests
• any of:
  • check-neutral = Test Rego Policies
  • check-skipped = Test Rego Policies
  • check-success = Test Rego Policies
• any of:
  • check-neutral = Lint
  • check-skipped = Lint
  • check-success = Lint
• any of:
  • check-neutral = Unit Test
  • check-skipped = Unit Test
  • check-success = Unit Test

All conditions

• check-success=Lint
• check-success=Manifest Tests
• check-success=Package Cloudbeat (docker)
• check-success=Package Cloudbeat (tar.gz)
• check-success=Test Rego Policies
• check-success=Unit Test
• any of [🛡 GitHub branch protection]:
  • check-neutral = CLA
  • check-skipped = CLA
  • check-success = CLA
• any of [🛡 GitHub branch protection]:
  • check-neutral = Package Cloudbeat (docker)
  • check-skipped = Package Cloudbeat (docker)
  • check-success = Package Cloudbeat (docker)
• any of [🛡 GitHub branch protection]:
  • check-neutral = Package Cloudbeat (tar.gz)
  • check-skipped = Package Cloudbeat (tar.gz)
  • check-success = Package Cloudbeat (tar.gz)
• any of [🛡 GitHub branch protection]:
  • check-neutral = Manifest Tests
  • check-skipped = Manifest Tests
  • check-success = Manifest Tests
• any of [🛡 GitHub branch protection]:
  • check-neutral = Test Rego Policies
  • check-skipped = Test Rego Policies
  • check-success = Test Rego Policies
• any of [🛡 GitHub branch protection]:
  • check-neutral = Lint
  • check-skipped = Lint
  • check-success = Lint
• any of [🛡 GitHub branch protection]:
  • check-neutral = Unit Test
  • check-skipped = Unit Test
  • check-success = Unit Test
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • chore(deps): update docker (main) #4821
• #approved-reviews-by >= 1 [🛡 GitHub repository ruleset rule [org] Require a PR for Renovate]
  • chore(deps): update docker (main) #4821
• #approved-reviews-by >= 1 [🛡 GitHub repository ruleset rule [org] Require a PR]
  • chore(deps): update docker (main) #4821
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • chore(deps): update docker (main) #4821
• #changes-requested-reviews-by = 0 [🛡 GitHub repository ruleset rule [org] Require a PR for Renovate]
  • chore(deps): update docker (main) #4821
• #changes-requested-reviews-by = 0 [🛡 GitHub repository ruleset rule [org] Require a PR]
  • chore(deps): update docker (main) #4821

Reason

Pull request #4821 has been merged manually at 7b7cbc9

Hint

You were too fast!