chore(deps): fix open Dependabot vulnerabilities with available patches

[matthyx]

Summary

This PR updates dependencies that have known security vulnerabilities and available patches listed in Dependabot Alerts:

• github.com/moby/go-archive -> v0.3.3 (fixes GHSA-m9cp-7w22-8354)
• github.com/cilium/ebpf -> v0.22.0 (fixes GHSA-vv5r-49g7-gcm8)
• github.com/google/cel-go -> v0.29.0 (fixes GHSA-w246-v2cm-658w)
• google.golang.org/grpc -> v1.82.1 (fixes GHSA-chpr-8hr3-455g)
• oras.land/oras-go/v2 -> v2.6.2 (fixes GHSA-ph23-7cwv-g5f9, GHSA-p73f-cv9h-rmvm, GHSA-w3vh-vv56-j9x3, GHSA-8hfc-rqmq-4h27, GHSA-6x2p-2pq5-fvgq)
• github.com/testcontainers/testcontainers-go & modules/k3s -> v0.40.0 (bumped for compatibility with updated moby/go-archive)

Verification

• CGO_ENABLED=0 go test ./... passed successfully.

Summary by CodeRabbit

• Chores
  • Updated underlying libraries and tooling to newer versions.
  • Improved compatibility and maintenance through refreshed runtime, container, networking, and synchronization components.
  • Replaced an older system-information library with its newer major version.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: c5168624-5319-4a4e-a970-162cba8dacbb

📥 Commits

Reviewing files that changed from the base of the PR and between db2f4ee and 3d05660.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

This change updates direct and indirect dependency versions in go.mod. It adds ebitengine/purego, replaces gopsutil/v3 with gopsutil/v4, and removes two indirect dependencies.

Changes

Go dependency updates

Layer / File(s)	Summary
Direct dependency version updates go.mod	Updates cel-go, testcontainers-go/modules/k3s, and golang.org/x/sync.
Indirect dependency alignment go.mod	Updates indirect dependencies, adds ebitengine/purego, replaces gopsutil/v3 with gopsutil/v4, and removes go-m1cpu and go-strcase.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: 🔵 Low · up to 3d056

This PR updates vulnerable dependencies without changing application boundaries or privileged runtime behavior. Merge is reasonable with explicit owner awareness that the cited Docker/Moby advisory applicability to the client packages should be confirmed.

Suggested reviewers: shivansh-gohem

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the dependency updates that address open Dependabot vulnerabilities.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/dependabot-security-updates

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Summary:

• License scan: success
• Credentials scan: failure
• Vulnerabilities scan: failure
• Unit test: success
• Go linting: success