build(deps): bump the chainguard group with 3 updates

[dependabot]

Bumps the chainguard group with 3 updates: chainguard.dev/apko, chainguard.dev/melange and github.com/chainguard-dev/yam.

Updates chainguard.dev/apko from 1.2.3 to 1.2.4

Release notes

Sourced from chainguard.dev/apko's releases.

Release v1.2.4

Changelog

• 4556aed64043278fb8fa429e620fdbbe2a9e3254 build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 (#2180)

Commits

• 4556aed build(deps): bump k8s.io/apimachinery from 0.35.3 to 0.35.4 (#2180)
• 3e3a0a7 build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 (#2181)
• c89e3b0 build(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#2176)
• a120e77 build(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (#2177)
• 1723dc9 build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#2178)
• db2fcbc build(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 (#2179)
• 8215eea build(deps): bump chainguard-dev/actions from 1.6.13 to 1.6.14 (#2174)
• 728739b build(deps): bump github.com/google/go-containerregistry from 0.21.3 to 0.21....
• See full diff in compare view

Updates chainguard.dev/melange from 0.50.0 to 0.50.1

Release notes

Sourced from chainguard.dev/melange's releases.

Release v0.50.1

What's Changed

• fix(qemu): fix CPU/Memory resource precedence by @​egibs in chainguard-dev/melange#2489

Full Changelog: chainguard-dev/melange@v0.50.0...v0.50.1

Commits

• 738880d fix(qemu): fix CPU/Memory resource precedence (#2489)
• See full diff in compare view

Updates github.com/chainguard-dev/yam from 0.2.55 to 0.2.56

Commits

• 4ef11ff build(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (#209)
• 1f7a362 build(deps): bump chainguard-dev/actions from 1.6.13 to 1.6.14 (#207)
• 2b35f17 build(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#208)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions