chore(deps): bump the minor-and-patch group across 1 directory with 7 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
filippo.io/age	1.3.1	1.3.2
github.com/moby/moby/api	1.55.0	1.56.0
github.com/moby/moby/client	0.5.1	0.6.0
golang.org/x/oauth2	0.36.0	0.37.0
k8s.io/apimachinery	0.36.4	0.37.0
k8s.io/client-go	0.36.4	0.37.0

Updates filippo.io/age from 1.3.1 to 1.3.2

Release notes

Sourced from filippo.io/age's releases.

age v1.3.2 is a minor release with a wide range of fixes and hardening improvements.

Some previously-accepted inputs are now rejected: headers over 2 MiB or 1024 recipients, malformed SSH keys in recipients files, and non-UTF-8 plaintext written to a terminal (force with -o -).

Pre-built binaries now cover windows/arm64 and darwin/amd64, and release archives include the compatibility plugins (age-plugin-pq, age-plugin-tag, and age-plugin-tagpq).

Commits

• b74dce4 doc: regenerate groff and html man pages
• 5c1b90c all: release v1.3.2
• 7fcc72e plugin: correct working directory comment
• 58ef9fc cmd/age-keygen: correct public key output documentation
• de96c8e cmd/age: reject invalid UTF-8 terminal output
• 3604609 cmd/age-plugin-batchpass: correct documented scrypt limit
• 6ff2f30 cmd/age: enable PTY tests on Darwin
• cdb30a1 cmd/age: recognize armored identity files after whitespace
• 9cbe8d8 plugin: allow empty prompt responses
• eb70608 internal/format: validate stanza fields when marshaling
• Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

• GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
• POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
• api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
• api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
• api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
• api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
• api: Bump to 1.56. moby/moby#53425
• api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
• api: remove gotest.tools from tests. moby/moby#53535
• api: swagger: Use int64 for build query params. moby/moby#53520
• api: use blackbox testing. moby/moby#53525
• Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447

Commits

• 9b2179d Merge pull request #53572 from vvoland/api-docs-cut
• 575cf82 Merge pull request #53571 from thaJeztah/bump_tools
• 20beedb api/docs: Cut v1.56
• bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
• 65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
• 0af79c4 Merge pull request #53570 from vvoland/process-release
• 7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
• 0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
• e1d06bd Drop replace rules
• b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
• Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

• pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489
• api: Bump to 1.56. moby/moby#53425
• minor cleanups, refactors. moby/moby#53509

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

• Runtime: Load authConfig only when needed and fix useless WARNING

• Runtime: Add lxc-conf flag to allow custom lxc options

• Runtime: Fix race conditions in parallel pull
• Runtime: Improve CMD, ENTRYPOINT, and attach docs.

• Documentation: Small fix to docs regarding adding docker groups
• Documentation: Add MongoDB image example

• Builder: Add USER instruction do Dockerfile

• Documentation: updated default -H docs
• Remote API: Sort Images by most recent creation date.

• Builder: Add workdir support for the Buildfile
• Runtime: Add an option to set the working directory

• Runtime: Show tag used when image is missing

• Documentation: Update readme with dependencies for building
• Documentation: Add instructions for creating and using the docker group
• Remote API: Reworking opaque requests in registry module

• Runtime: Fix Graph ByParent() to generate list of child images per parent image.

• Runtime: Add Image name to LogEvent tests
• Documentation: Add sudo to examples and installation to documentation

• Hack: Bash Completion: Limit commands to containers of a relevant state

• Remote API: Add image name in /events
• Runtime: Apply volumes-from before creating volumes

• Runtime: Make docker run handle SIGINT/SIGTERM
• Runtime: Prevent crash when .dockercfg not readable

• Hack: Add docker dependencies coverage testing into docker-ci

• Runtime: Add -privileged flag and relevant tests, docs, and examples
• Packaging: Docker-brew 0.5.2 support and memory footprint reduction

• Runtime: Install script should be fetched over https, not http.

• Packaging: Add new docker dependencies into docker-ci
• Runtime: Use Go 1.1.2 for dockerbuilder
• Registry: Improve auth push
• Runtime: API, issue 1471: Use groups for socket permissions
• Documentation: PostgreSQL service example in documentation
• Contrib: bash completion script
• Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
• Documentation: Fix typo in docs for docker run -dns
• Documentation: Adding a reference to ps -a

• Runtime: Correctly detect IPv4 forwarding
• Packaging: Revert "docker.upstart: avoid spawning a sh process"

• Runtime: Use ranged for loop on channels

• Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
• Tests: Fix typo in TestBindMounts (runContainer called without image)

• Runtime: add websocket support to /container//attach/ws
• Runtime: Mount /dev/shm as a tmpfs

• Builder: Only count known instructions as build steps
• Builder: Fix docker build and docker events output
• Runtime: switch from http to https for get.docker.io

• Tests: Improve TestGetContainersTop so it does not rely on sleep

• Packaging: Docker-brew and Docker standard library

• Testing: Add some tests in server and utils

... (truncated)

Commits

• f4a4f1c Bump to 0.6.0
• f925edd Merge pull request #1525 from griff/1503-fix
• 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
• 326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
• a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
• 262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
• 551092f Add lxc-conf flag to allow custom lxc options
• 3f802f4 Fix race conditions in parallel pull
• 0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
• 42fe550 Merge pull request #1614 from denibertovic/docs
• Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits

• c624b89 google: change the snake case endpoint to kebab-case
• 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.4 to 0.37.0

Commits

• 7164e39 Update dependencies to v0.37.0 tag
• e55f9ba feat(api): Update node restriction admission to use new API
• cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
• 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
• f21afab Add validation for camelcase in reason field
• d7ad413 Merge pull request #140782 from dims/update-kube-openapi
• e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
• 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
• 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
• 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.4 to 0.37.0

Commits

• 2807644 Update dependencies to v0.37.0 tag
• 50c6f9b metrics: Register: Fix incorrect assignment
• 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
• 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
• 2bf14f2 Merge pull request #140990 from xigang/revert-140448
• 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
• df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
• 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
• 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
• 694f4eb apidiff: ignore adding entirely new API groups
• Additional commits viewable in compare view

Updates k8s.io/streaming from 0.36.4 to 0.37.0

Commits

• cdd8da2 bump github.com/google/cadvisor/lib from v0.60.3 to v0.60.4
• 68009e8 Merge pull request #140021 from dims/conntrack-cpuset
• bed9c7d kube-proxy: detect host CPU count via cpuset.NumCPU instead of cadvisor
• 0a84e25 Merge pull request #139420 from dims/update-x-net-deps
• 9ef12fe Bump golang.org/x/net to HEAD for http2 go1.27 wrap fixes
• f00c6a5 Merge pull request #139258 from dims/update-x-net-deps
• a1f0619 Bump golang.org/x/net from v0.54.0 to v0.55.0
• 2d09b61 Merge pull request #139248 from dims/bump-golang.org/x/crypto-to-v0.52.0
• eb30797 Bump golang.org/x/crypto to v0.52.0
• 99242c8 Merge pull request #138561 from dims/update-xnet-dep
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions