Build(deps): Bump the github-dependencies group with 4 updates

[dependabot]

Bumps the github-dependencies group with 4 updates: golang.org/x/sys, github.com/fxamacker/cbor/v2, golang.org/x/net and golang.org/x/text.

Updates golang.org/x/sys from 0.43.0 to 0.44.0

Commits

• fb1facd windows: avoid uint16 overflow in NewNTUnicodeString
• 94ad893 windows: add GetIfTable2Ex, GetIpInterface{Entry,Table}, GetUnicastIpAddressT...
• 54fe89f cpu: use IsProcessorFeaturePresent to calculate ARM64 on windows
• df7d5d7 unix: automatically remove container created by mkall.sh
• 68a4a8e unix: avoid nil pointer dereference in Utime
• 690c91f unix: add CPUSetDynamic for systems with more than 1024 CPUs
• See full diff in compare view

Updates github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2

Release notes

Sourced from github.com/fxamacker/cbor/v2's releases.

v2.9.2

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

• Reject encoding indefinite-length map with odd item count by @​fxamacker in fxamacker/cbor#764
• Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in fxamacker/cbor#765
• Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in fxamacker/cbor#766
• Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in fxamacker/cbor#767
• Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in fxamacker/cbor#768

CI / GitHub Actions and Docs

• Bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in fxamacker/cbor#760
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @​dependabot[bot] in fxamacker/cbor#761
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in fxamacker/cbor#763
• Update README for v2.9.2 release by @​fxamacker in fxamacker/cbor#769

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

Commits

• 45589ab Merge pull request #769 from fxamacker/fxamacker/update-readme-release-status
• 8e98ea5 Update README for v2.9.2 release
• e501aca Merge pull request #768 from fxamacker/fxamacker/update-docs
• e6af0aa Merge pull request #767 from fxamacker/fxamacker/refactor-indefinite-length-e...
• 57f1601 Merge pull request #766 from fxamacker/fxamacker/no-opt-to-remove-nil-type-in...
• 0cdb674 Fix indefinite-length string chunk validation
• c0db60f Improve GitHub Workflow code coverage regex
• 63937fe Fix panic message to print the unrecognized tag
• f0352a5 Add more tests
• 0c20a0f Refactor encoding of indefinite-length data item
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.53.0 to 0.54.0

Commits

• b138e06 go.mod: update golang.org/x dependencies
• 689f70a quic: fix wrong final size being used for RESET_STREAM frame
• 208f306 http3: increase handshake timeout
• 49810da http2: enable net/http wrapping when go >= 1.27
• 5e11a5a quic: fix data race in streamForFrame
• 8c63081 http2: use empty Transport rather than DefaultTransport in http2wrap
• fc7b466 http2: add http2wrap test
• 15c2cb1 http2: avoid overflowing 32-bit int when http2wrap enabled
• 6465188 http2: add wrapped Server
• 72f419a http2: add wrapped ClientConn
• Additional commits viewable in compare view

Updates golang.org/x/text from 0.36.0 to 0.37.0

Commits

• 3ef517e go.mod: update golang.org/x dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[k8s-ci-robot]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[jsafrane]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], jsafrane

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [jsafrane]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment