feat(deps): bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0 (#3716)

Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.12.1 to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump slsa-framework/slsa-github-generator to 1.2.2 by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1489">google/go-containerregistry#1489</a></li>
<li>Features: Allow eliding <code>serviceaccount</code> lookups. by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1490">google/go-containerregistry#1490</a></li>
<li>Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1491">google/go-containerregistry#1491</a></li>
<li>add source archive checksum into the checksums.txt by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1492">google/go-containerregistry#1492</a></li>
<li>Fix calculating tarball size when duplicated layers exist by <a
href="https://github.com/tydra-wang"><code>@​tydra-wang</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1495">google/go-containerregistry#1495</a></li>
<li>Add support for zstd compression by <a
href="https://github.com/LFrobeen"><code>@​LFrobeen</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1487">google/go-containerregistry#1487</a></li>
<li>docs: pull latest instead of debug by <a
href="https://github.com/AndrewCharlesHay"><code>@​AndrewCharlesHay</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1497">google/go-containerregistry#1497</a></li>
<li>Make credential warning slightly more accurate by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1499">google/go-containerregistry#1499</a></li>
<li>Make unit tests substantially faster by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1498">google/go-containerregistry#1498</a></li>
<li>Use the default retry predicate in transport by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1502">google/go-containerregistry#1502</a></li>
<li>Revert &quot;docs: pull latest instead of debug (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1497">#1497</a>)&quot;
by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1504">google/go-containerregistry#1504</a></li>
<li>Update Arch Linux install instructions by <a
href="https://github.com/kpcyrd"><code>@​kpcyrd</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1508">google/go-containerregistry#1508</a></li>
<li>Fix various lints by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1507">google/go-containerregistry#1507</a></li>
<li>Fix missing doc comment by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1509">google/go-containerregistry#1509</a></li>
<li>Treat empty registry config as anonymous by <a
href="https://github.com/lcarva"><code>@​lcarva</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1512">google/go-containerregistry#1512</a></li>
<li>Bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1511">google/go-containerregistry#1511</a></li>
<li>Bump actions/stale from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1519">google/go-containerregistry#1519</a></li>
<li>Race http fallback ping by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1521">google/go-containerregistry#1521</a></li>
<li>FIX mutate.Time not respecting history by <a
href="https://github.com/miguelvalerio"><code>@​miguelvalerio</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1520">google/go-containerregistry#1520</a></li>
<li>test: use <code>T.TempDir</code> to create temporary test directory
by <a href="https://github.com/Juneezee"><code>@​Juneezee</code></a> in
<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1522">google/go-containerregistry#1522</a></li>
<li>crane: add digest --full by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1524">google/go-containerregistry#1524</a></li>
<li>Hack around DockerHub plugin scope handling by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1527">google/go-containerregistry#1527</a></li>
<li>crane: support --full-ref for crane ls by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1525">google/go-containerregistry#1525</a></li>
<li>Revert plugin scope hack by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1531">google/go-containerregistry#1531</a></li>
<li>clarify crane download readme by <a
href="https://github.com/dtanner"><code>@​dtanner</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1533">google/go-containerregistry#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/LFrobeen"><code>@​LFrobeen</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1487">google/go-containerregistry#1487</a></li>
<li><a
href="https://github.com/AndrewCharlesHay"><code>@​AndrewCharlesHay</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1497">google/go-containerregistry#1497</a></li>
<li><a href="https://github.com/kpcyrd"><code>@​kpcyrd</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1508">google/go-containerregistry#1508</a></li>
<li><a
href="https://github.com/miguelvalerio"><code>@​miguelvalerio</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1520">google/go-containerregistry#1520</a></li>
<li><a href="https://github.com/Juneezee"><code>@​Juneezee</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1522">google/go-containerregistry#1522</a></li>
<li><a href="https://github.com/dtanner"><code>@​dtanner</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1533">google/go-containerregistry#1533</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0">https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1e09daa93e"><code>1e09daa</code></a>
clarify crane download readme (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1533">#1533</a>)</li>
<li><a
href="8e08d51670"><code>8e08d51</code></a>
Revert &quot;Hack around DockerHub plugin scope handling&quot; (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1531">#1531</a>)</li>
<li><a
href="5ad0a76120"><code>5ad0a76</code></a>
crane: support --full-ref for crane ls (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1525">#1525</a>)</li>
<li><a
href="b063f6aeac"><code>b063f6a</code></a>
Hack around DockerHub plugin scope handling (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1527">#1527</a>)</li>
<li><a
href="e797859b62"><code>e797859</code></a>
crane: add digest --full (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1524">#1524</a>)</li>
<li><a
href="3986cf4645"><code>3986cf4</code></a>
test: use <code>T.TempDir</code> to create temporary test directory (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1522">#1522</a>)</li>
<li><a
href="9db616f1da"><code>9db616f</code></a>
FIX mutate.Time not respecting history (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1520">#1520</a>)</li>
<li><a
href="804866391d"><code>8048663</code></a>
Race http fallback ping (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1521">#1521</a>)</li>
<li><a
href="e64ff3accb"><code>e64ff3a</code></a>
Bump actions/stale from 6 to 7 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1519">#1519</a>)</li>
<li><a
href="9bd82373fd"><code>9bd8237</code></a>
Bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1511">#1511</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.12.1&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

go.mod

@@ -21,7 +21,7 @@ require (
 	github.com/disgoorg/snowflake/v2 v2.0.1
 	github.com/distribution/distribution/v3 v3.0.0-20221021092657-c47a966fded8
 	github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible
-	github.com/google/go-containerregistry v0.12.1
+	github.com/google/go-containerregistry v0.13.0
 	github.com/google/go-github/v48 v48.2.0
 	github.com/google/ko v0.12.0
 	github.com/google/uuid v1.3.0

go.sum

@@ -1591,8 +1591,8 @@ github.com/google/go-containerregistry v0.5.1/go.mod h1:Ct15B4yir3PLOP5jsy0GNeYV
 github.com/google/go-containerregistry v0.7.1-0.20211118220127-abdc633f8305/go.mod h1:6cMIl1RfryEiPzBE67OgtZdEiLWz4myqCQIiBMy3CsM=
 github.com/google/go-containerregistry v0.9.0/go.mod h1:9eq4BnSufyT1kHNffX+vSXVonaJ7yaIOulrKZejMxnQ=
 github.com/google/go-containerregistry v0.11.0/go.mod h1:BBaYtsHPHA42uEgAvd/NejvAfPSlz281sJWqupjSxfk=
-github.com/google/go-containerregistry v0.12.1 h1:W1mzdNUTx4Zla4JaixCRLhORcR7G6KxE5hHl5fkPsp8=
-github.com/google/go-containerregistry v0.12.1/go.mod h1:sdIK+oHQO7B93xI8UweYdl887YhuIwg9vz8BSLH3+8k=
+github.com/google/go-containerregistry v0.13.0 h1:y1C7Z3e149OJbOPDBxLYR8ITPz8dTKqQwjErKVHJC8k=
+github.com/google/go-containerregistry v0.13.0/go.mod h1:J9FQ+eSS4a1aC2GNZxvNpbWhgp0487v+cgiilB4FqDo=
 github.com/google/go-github/v28 v28.1.1/go.mod h1:bsqJWQX05omyWVmc00nEUql9mhQyv38lDZ8kPZcQVoM=
 github.com/google/go-github/v45 v45.2.0/go.mod h1:FObaZJEDSTa/WGCzZ2Z3eoCDXWJKMenWWTrd8jrta28=
 github.com/google/go-github/v48 v48.2.0 h1:68puzySE6WqUY9KWmpOsDEQfDZsso98rT6pZcz9HqcE=