fix(deps): update all dependencies

[bootc-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/onsi/ginkgo/v2	v2.32.2 → v2.33.0
github.com/onsi/gomega	v1.43.0 → v1.43.1
go.podman.io/common	v0.69.1 → v0.69.2
go.podman.io/podman/v6	v6.1.1 → v6.1.2

---

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.33.0

Compare Source

Features

• The JUnit reporter now records each spec's ReportEntrys as <properties> on its <testcase> element, with the entry's name and its JSON-encoded value. Thanks @​pohly! [23db51a]

Maintenance

• Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. See RELEASING.md. [8616ecb]

onsi/gomega (github.com/onsi/gomega)

v1.43.1

Compare Source

Maintenance

• Update go.yaml.in/yaml/v3 to v3.0.5 [d547015]
• Releases are now cut by a GitHub Actions workflow (Actions -> Release -> Run workflow) rather than by hand, with changelog entries collected under ## Unreleased as the work happens. Releases still ship the stripped-down tree on master-lite - tests removed and Ginkgo dropped from go.mod - and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]

podman-container-tools/container-libs (go.podman.io/common)

v0.69.2

What's Changed

• Upgrade image and storage to fix CVE-2025-11395
• [podman-6.1] OCPNODE-4477: docker: add blob-level mirror fallback in dockerImageSource by @​TomSweeneyRedHat in #​1062
• [podman-6.1] backport force_port_listen option and bump common by @​Luap99 in #​1074
• [podman-6.1] RPM: Allow RH image verification on Fedora and CentOS Stream by @​lsm5 in #​1120
• [podman-6.1] Packit: Add Fedora 45 downstream target by @​lsm5 in #​1139
• [podman-6.1] backport archive: map v3 file capability rootid to the container namespace by @​giuseppe in #​1144

Full Changelog: podman-container-tools/container-libs@common/v0.69.0...common/v0.69.2

podman-container-tools/podman (go.podman.io/podman/v6)

v6.1.2

Compare Source

Security

• This release addresses (CVE-2025-11395), where importing images containing crafted layer tarballs with the podman load command, or importing volumes containing crafted symlinks with podman volume import, allows overwriting files on the host.
• This release also addresses CVE-2026-79699 and CVE-2026-79705, though we do not believe these CVEs are exploitable through the Podman command line.

Misc

• Updated Buildah to v1.45.1
• Updated Common to v0.69.2
• Updated Image to v5.41.2
• Updated Storage to v1.64.1

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[bootc-bot]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
go.podman.io/buildah	v1.45.0 -> v1.45.1
go.podman.io/image/v5	v5.41.1 -> v5.41.2
go.podman.io/storage	v1.64.0 -> v1.64.1