chore(deps): bump the all group with 4 updates

[dependabot]

Bumps the all group with 4 updates: github.com/aws/aws-sdk-go-v2/service/kms, github.com/aws/aws-sdk-go-v2/service/secretsmanager, github.com/octo-sts/app and golang.org/x/crypto.

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.49.2 to 1.49.4

Commits

• 427c682 Release 2024-03-18
• 93e06ff Regenerated Clients
• 58be623 Update endpoints model
• 9927740 Update API model
• e5b7766 add ratelimit.None (#2562)
• 10c4487 Release 2024-03-15
• db0b1ab Regenerated Clients
• 92c0060 Update endpoints model
• e5bb86e Update API model
• 49b368e Release 2024-03-14
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.40.3 to 1.41.0

Commits

• 2c5c1de Release 2025-12-08
• a968e75 Regenerated Clients
• b110f67 Update endpoints model
• 82760c3 Update API model
• 9e038d3 [merge 12/8/25] default MaxConnsPerHost to 2048 (#3245)
• 55b9a85 Release 2025-12-05
• cb36f84 Regenerated Clients
• 081bac0 Update API model
• 25f26c2 Release 2025-12-04
• aadf9d3 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/octo-sts/app from 0.5.3 to 0.5.4

Release notes

Sourced from github.com/octo-sts/app's releases.

v0.5.4

What's Changed

• pin action by @​cpanato in octo-sts/app#942
• update permissions doc by @​cpanato in octo-sts/app#944
• hosted_zone_logging_enabled to false by @​cpanato in octo-sts/app#957
• feat: Optional EVENT_INGRESS_URI by @​yagihash in octo-sts/app#950
• set require_team to false in the gclb by @​cpanato in octo-sts/app#973
• fix prober missing variable by @​cpanato in octo-sts/app#977
• Exchange: Return InvalidArgument if scope or identity are missing by @​wlynch in octo-sts/app#1001
• revert sdk bump to v0.1.39 by @​cpanato in octo-sts/app#1006
• add new field to the bq schema by @​cpanato in octo-sts/app#1012
• add event_name to the claim_pattern struct by @​cpanato in octo-sts/app#1015
• add repository in the claim_pattern schema by @​cpanato in octo-sts/app#1017
• upgrade sdk to v0.1.40 and keep the deprecated function for now by @​cpanato in octo-sts/app#1008
• add timestamp field to event for better debugging by @​k4leung4 in octo-sts/app#1029
• Treat foo/.github scope the same as foo. by @​mattmoor in octo-sts/app#1055
• bump github.com/bradleyfalzon/ghinstallation/v2 and go-github by @​cpanato in octo-sts/app#1074
• Fix error message order in trust policy pattern matching by @​tcnghia in octo-sts/app#1099
• Add jsonschema for autocomplete. by @​wlynch in octo-sts/app#1094
• Fix link to raw GitHub content in README. by @​wlynch in octo-sts/app#1108
• [bugfix] fix loading app secret cert from env var by @​jeffgran-dox in octo-sts/app#1085
• check if err.Response is not nil by @​cpanato in octo-sts/app#1154
• update CI and add .go-version and .terraform-version by @​cpanato in octo-sts/app#1153
• bump versions by @​cpanato in octo-sts/app#1171

And several dependencies updates

New Contributors

• @​yagihash made their first contribution in octo-sts/app#950
• @​tcnghia made their first contribution in octo-sts/app#1099
• @​jeffgran-dox made their first contribution in octo-sts/app#1085

Full Changelog: octo-sts/app@v0.5.3...v0.5.4

Commits

• 4248ebe bump versions (#1171)
• 222f12e Bump chainguard.dev/sdk from 0.1.44 to 0.1.45 in the all group (#1170)
• 9929159 Bump k8s.io/apimachinery from 0.34.2 to 0.34.3 in the all group (#1168)
• c88dc06 Bump github.com/chainguard-dev/clog from 1.7.0 to 1.8.0 (#1169)
• 14dfae5 Bump step-security/harden-runner from 2.13.3 to 2.14.0 in the all group (#1167)
• 70da7da Bump github.com/chainguard-dev/terraform-infra-common from 0.9.6 to 0.9.7 in ...
• c8d1592 Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#1165)
• 09417ac Bump the all group across 3 directories with 1 update (#1166)
• 8570dfc Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 in the all group (#1161)
• 88b77dc Bump google.golang.org/api from 0.256.0 to 0.257.0 (#1160)
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.45.0 to 0.46.0

Commits

• 19acf81 go.mod: update golang.org/x dependencies
• 3a1c6b4 x509roots/fallback: update bundle
• f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions