Wiz: Upgrade multiple dependencies (resolves 89 findings)

[wiz-betterup]

Wiz has created this PR to fix 89 findings detected in this project

Changes were made to the following file(s):

• go.mod

Vulnerabilities:

Component	Findings	Locations
github.com/Azure/go-ntlmssp 0.0.0-20221128193559-754e69321358 → 0.1.1	CVE-2026-32952	/go.mod
github.com/cloudflare/circl 1.3.3 → 1.6.3	GHSA-9763-4f94-gfch CVE-2026-1229 CVE-2025-8556	/go.mod
github.com/docker/cli 23.0.4+incompatible → 29.2.0	CVE-2025-15558	/go.mod
github.com/docker/docker 23.0.4+incompatible → 29.3.1	CVE-2024-29018 CVE-2024-24557 CVE-2026-34040 GHSA-jq35-85cj-fj4p CVE-2025-54410	/go.mod
github.com/go-git/go-billy/v5 5.4.1 → 5.9.0	CVE-2026-44973 CVE-2026-44740	/go.mod
github.com/go-git/go-git/v5 5.7.0 → 5.19.1	CVE-2025-21613 CVE-2023-49569 CVE-2023-49568 CVE-2026-45022 CVE-2026-41506 CVE-2025-21614 CVE-2026-25934 CVE-2026-45571 GHSA-w5pp-99ch-qj29 CVE-2026-34165 CVE-2026-45570 CVE-2026-33762	/go.mod
github.com/go-jose/go-jose/v3 3.0.0 → 3.0.5	CVE-2026-34986 GHSA-2c7c-3mj9-8fqh CVE-2024-28180 CVE-2025-27144	/go.mod
github.com/golang-jwt/jwt/v4 4.5.0 → 4.5.2	CVE-2025-30204 CVE-2024-51744	/go.mod
github.com/golang/glog 1.1.1 → 1.2.4	CVE-2024-45339	/go.mod
github.com/hashicorp/go-retryablehttp 0.7.2 → 0.7.7	CVE-2024-6104	/go.mod
github.com/in-toto/in-toto-golang 0.6.0 → 0.11.0	GHSA-pmwq-pjrm-6p5r	/go.mod
github.com/notaryproject/notation-go 1.0.0-rc.3 → 1.0.0-rc.6	CVE-2023-33959	/go.mod
github.com/open-policy-agent/opa 0.51.0 → 1.4.0	CVE-2025-46569 CVE-2024-8260	/go.mod
github.com/sigstore/cosign 1.13.1 → 3.0.5	CVE-2026-39395 CVE-2023-46737 CVE-2026-24122	/go.mod
github.com/sigstore/fulcio 1.1.0 → 1.8.6	CVE-2025-66506 CVE-2026-49478 CVE-2026-22772	/go.mod
github.com/sigstore/rekor 1.0.1 → 1.5.2	CVE-2026-48702 CVE-2023-30551 CVE-2023-33199 CVE-2026-23831 CVE-2026-24117	/go.mod
github.com/sigstore/sigstore 1.5.2 → 1.10.4	CVE-2026-24137	/go.mod
github.com/sirupsen/logrus 1.9.0 → 1.9.1	CVE-2025-65637	/go.mod
go.mongodb.org/mongo-driver 1.11.3 → 1.17.7	CVE-2026-2303	/go.mod
go.opentelemetry.io/contrib/instrumentat- ion/net/http/otelhttp 0.41.1 → 0.44.0	CVE-2023-45142	/go.mod
go.opentelemetry.io/otel/sdk 1.15.1 → 1.43.0	CVE-2026-39883	/go.mod
golang.org/x/crypto 0.9.0 → 0.52.0	CVE-2026-39831 CVE-2024-45337 CVE-2026-39834 CVE-2026-39832 CVE-2026-39830 CVE-2026-39833 CVE-2026-42508 CVE-2026-46595 CVE-2025-47913 CVE-2026-46597 CVE-2025-22869 CVE-2026-39829 CVE-2026-39828 CVE-2026-39835 CVE-2026-39827 CVE-2023-48795 CVE-2025-47914 CVE-2025-58181 CVE-2026-46598	/go.mod
golang.org/x/net 0.10.0 → 0.55.0	CVE-2026-39821 CVE-2023-45288 CVE-2023-39325 CVE-2023-44487 CVE-2025-22872 CVE-2025-22870 CVE-2023-3978 CVE-2026-25680	/go.mod
golang.org/x/oauth2 0.7.0 → 0.27.0	CVE-2025-22868	/go.mod
google.golang.org/grpc 1.55.0 → 1.82.1	CVE-2026-33186 GHSA-hrxh-6v49-42gf CVE-2023-44487	/go.mod
google.golang.org/protobuf 1.30.0 → 1.33.0	CVE-2024-24786	/go.mod
gopkg.in/go-jose/go-jose.v2 2.6.1 → 2.6.3	CVE-2024-28180	/go.mod
oras.land/oras-go/v2 2.1.0 → 2.6.1	CVE-2026-50151 GHSA-vh4v-2xq2-g5cg CVE-2026-50162 CVE-2026-48978	/go.mod

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[wiz-betterup]

⚠️ Lock file update issue

Please update the lock file manually before merging this PR.

go.sum

Internal Error