build(deps): bump the project-dependency group across 1 directory with 10 updates

[dependabot]

Bumps the project-dependency group with 7 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.42.0	1.42.1
github.com/lima-vm/lima/v2	2.1.3	2.1.4
github.com/onsi/gomega	1.40.0	1.42.1
github.com/xorcare/pointer	1.2.2	1.26.0
golang.org/x/crypto	0.53.0	0.54.0
golang.org/x/tools	0.47.0	0.48.0
k8s.io/apimachinery	0.35.6	0.36.2

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.42.1

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/lima-vm/lima/v2 from 2.1.3 to 2.1.4

Release notes

Sourced from github.com/lima-vm/lima/v2's releases.

v2.1.4

Changes

• Cherry-picks from master to release/2.1
  • Only add xorrisofs flag to the xorrisofs command (#5129, thanks to @​afbjorklund)
  • fix(qemu): fallback from hvf to tcg on macOS (#5137, thanks to @​kavirakesh14)
  • nerdctl: update from v2.3.3 to v2.3.4 (#5169)
  • templates: update (#5170)
  • templates/freebsd-15: support 9p mounts (#5172)
  • cmd/limactl: include name in network list --json output (#5179, thanks to @​coulof)

Full changes: https://github.com/lima-vm/lima/milestone/73?closed=1

Usage

$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.
$ lima uname
Linux

---

The binaries were built automatically on GitHub Actions. The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/28630554371

The sha256sum of the SHA256SUMS file itself is 8bd82f03bc23acafc7e129fdbcbd9401b50eee2723817b8127f16dee3aebef92 .

---

Release manager: @​AkihiroSuda

Commits

• 5f0456d Merge pull request #5181 from AkihiroSuda/dev-2.1
• 7a24fe7 cmd/limactl: include name in network list --json output
• e4d96d5 templates/freebsd-15: support 9p mounts
• d34874a templates: update
• e2a7567 nerdctl: update from v2.3.3 to v2.3.4
• cc00aa7 fix(qemu): fallback from hvf to tcg on macOS
• 78706f9 Only add xorrisofs flag to the xorrisofs command
• See full diff in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• ced6c1c v1.42.1
• 2beb9fb v1.42.1 (full)
• 006cd2c bump al lthe things
• 35ca084 v1.42.0
• d72697b v1.42.0 (full)
• 1f95d86 add a set of claude skills as a marketplace plugin
• af2bccb v1.41.0
• 73e81f6 v1.41.0 (full)
• e35a84f feat: devcontainer configuration with local pkgsite and GH pages
• f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
• Additional commits viewable in compare view

Updates github.com/xorcare/pointer from 1.2.2 to 1.26.0

Commits

• af78fd9 Deprecate package for Go 1.26+ (new(expr) replaces helpers)
• b187755 build(deps): bump actions/checkout from 5 to 6
• 8116b3f build(deps): bump actions/setup-go from 5 to 6
• 8e5343c build(deps): bump actions/checkout from 4 to 5
• 31a2563 build(deps): bump codecov/codecov-action from 4 to 5
• 4812c54 Change formatting of yaml files
• e79cacb Update golang workflow
• 0f6f672 build(deps): bump codecov/codecov-action from 2 to 4
• 653d950 build(deps): bump actions/checkout from 3 to 4
• b8e05d2 build(deps): bump actions/setup-go from 3 to 5
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits

• cdce021 go.mod: update golang.org/x dependencies
• d9474cc openpgp: make the deprecation message more explicit
• 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
• 0471e79 ssh/agent: enforce strict limits on DSA key parameters
• 6435c37 ssh: sanitize client disconnect messages
• 7d695da ssh/agent: drain channel stderr in agent forwarders
• 5b7f841 acme/autocert: fix data race in Manager.createCert
• 0b316e7 argon2: update RFC 9106 parameter recommendations
• 55aec0a x509roots/fallback: update bundle
• 5f2de1a internal: remove wycheproof tests
• See full diff in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

• 1eb64d4 semaphore: panic on negative weights
• See full diff in compare view

Updates golang.org/x/tools from 0.47.0 to 0.48.0

Commits

• 05f9cb5 go.mod: update golang.org/x dependencies
• 745d7ae gopls: add CompiledAsmFiles in cache.Package
• 797ee67 go/ssa: make Const(unsafe.Pointer, nil).IsNil() true
• 9751125 gopls/internal/test: Completion benchmarks use empty range
• 8786a96 internal/stdlib: update stdlib index for Go 1.27 Release Candidate 2
• 425085f gopls/internal/server: modify return of parseAction
• 30c4f87 go/analysis/passes/nilness: skip magic cgo functions
• 9e6441d gopls/internal/protocol/generate: remove manual rename overwritten
• df96841 gopls/internal/protocol: use Debug log level
• 278f062 gopls/internal/protocol: update to LSP 3.18
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.6 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits

• 9e7e939 cpu: handle vendor suffixes in parseRelease
• f6fb8a1 unix: use epoll_pwait rather than epoll_wait
• f3eeabf windows: avoid length overflow in NewNTString
• 3cb6647 unix: update glibc to 2.43
• c507910 windows: document safe usage of TrusteeValue
• See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.40.0

Commits

• 724af9c go.mod: update golang.org/x dependencies
• bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
• b326f3d go.mod: update golang.org/x dependencies
• 5ae8e57 unicode/norm: avoid infinite loop on invalid input
• 0dc94a2 all: fix some comments
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions