Update module github.com/google/go-containerregistry to v0.21.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/go-containerregistry	v0.21.4 → v0.21.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.5

Compare Source

What's Changed

• Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by @​thaJeztah in #​2254
• update to Go 1.26.2 by @​thaJeztah in #​2255
• Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by @​dependabot[bot] in #​2257
• build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by @​dependabot[bot] in #​2260

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated

Details:

Package	Change
github.com/moby/moby/client	v0.3.0 -> v0.4.0
golang.org/x/mod	v0.34.0 -> v0.35.0
golang.org/x/term	v0.41.0 -> v0.42.0
github.com/docker/cli	v29.3.1+incompatible -> v29.4.0+incompatible
github.com/moby/moby/api	v1.54.0 -> v1.54.1
golang.org/x/net	v0.52.0 -> v0.53.0
golang.org/x/text	v0.35.0 -> v0.36.0
golang.org/x/tools	v0.43.0 -> v0.44.0
golang.org/x/crypto	v0.49.0 -> v0.50.0
golang.org/x/sys	v0.42.0 -> v0.43.0

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.88%. Comparing base (00558da) to head (c1973f6).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4757      +/-   ##
==========================================
- Coverage   68.93%   68.88%   -0.05%     
==========================================
  Files         517      517              
  Lines       54441    54441              
==========================================
- Hits        37528    37501      -27     
- Misses      14044    14072      +28     
+ Partials     2869     2868       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[claude]

LGTM — routine Renovate dependency bump touching only go.mod/go.sum.

Extended reasoning...

Overview

This PR updates github.com/google/go-containerregistry from v0.21.4 to v0.21.5, with 10 cascading transitive dependency bumps (docker/cli, moby/api, moby/client, and several golang.org/x/* packages). Only go.mod and go.sum are modified.

Security risks

No security-sensitive code is touched. The updated packages are well-maintained upstream libraries; the go-containerregistry v0.21.5 release notes show only dependency bumps and a Go toolchain update with no API or behavioral changes.

Level of scrutiny

Low. This is a mechanical Renovate-generated patch-level update with no logic changes. The diff is entirely version string replacements in go.mod and checksum updates in go.sum.

Other factors

No bugs were identified by the bug hunting system. No prior reviews on this PR. The cascading changes are expected and documented by Renovate in the PR comments.