diff --git a/www/pomerium-envoy-custom/Makefile b/www/pomerium-envoy-custom/Makefile
index 5e03c54283ab..c594d78ba56d 100644
--- a/www/pomerium-envoy-custom/Makefile
+++ b/www/pomerium-envoy-custom/Makefile
@@ -1,1178 +1,1223 @@
 PORTNAME=	pomerium-envoy-custom
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.36.5-p1
-PORTREVISION=	2
+DISTVERSION=	1.36.8-p1
 CATEGORIES=	www
 DIST_SUBDIR=	${PORTNAME}
 
 MAINTAINER=	delphij@FreeBSD.org
 COMMENT=	Pomerium's custom Envoy build for use with pomerium
 WWW=		https://pomerium.io/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-ENVOY_SRC_COMMIT=	41749943780b54b70b510b1b1a4805ae529e174a
+ENVOY_SRC_COMMIT=	ee7784f95f506e2a606ae668f0d9f70f9d26af83
 ENVOY_API_COMMIT=	f8b75d1efa92bbf534596a013d9ca5873f79dd30
 
 USES=		cmake:indirect compiler:c++20-lang gmake go:no_targets java \
 		ninja:build python:build
 
 BUILD_DEPENDS=	${LOCALBASE}/bin/buf:devel/buf \
 		${LOCALBASE}/bin/yq:textproc/go-yq \
 		${LOCALBASE}/include/fmt/format.h:devel/libfmt \
 		${LOCALBASE}/include/nlohmann/json.hpp:devel/nlohmann-json \
 		${LOCALBASE}/include/spdlog/spdlog.h:devel/spdlog \
 		${LOCALBASE}/include/tclap/CmdLine.h:devel/tclap12 \
 		${LOCALBASE}/include/flatbuffers/flatbuffers.h:devel/flatbuffers \
 		${PYTHON_PKGNAMEPREFIX}Jinja2>0:devel/py-Jinja2@${PY_FLAVOR} \
 		${UNZIP_CMD}:archivers/unzip \
 		autoconf>=2.71:devel/autoconf \
 		automake>=1.16:devel/automake \
 		bash:shells/bash \
 		bazel:devel/bazel7 \
 		git:devel/git \
 		m4:devel/m4 \
 		zip:archivers/zip
 
 LIB_DEPENDS=	libbrotlidec.so:archivers/brotli \
 		libcares.so:dns/c-ares \
 		libmaxminddb.so:net/libmaxminddb \
 		libnghttp2.so:www/libnghttp2 \
 		libre2.so:devel/re2 \
 		libxxhash.so:devel/xxhash \
 		libyaml-cpp.so:devel/yaml-cpp \
 		libzstd.so:archivers/zstd
 
 JAVA_VERSION=	21
 ZLIBBASE=	${LOCALBASE:H}
 
 SUB_LIST+=	WRKSRC=${WRKSRC} \
 		PYTHON_CMD=${PYTHON_CMD}
 SUB_FILES+=	workspace_status.sh \
 		rules_python_py_runtime_info_freebsd.patch \
 		rules_python_py_executable_freebsd.patch \
 		rules_python_runtime_env_toolchain_freebsd.patch
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	pomerium
 GH_PROJECT=	envoy-custom
 
 # Top-level WORKSPACE archives fetched directly by Bazel.
 # These are not covered by repository_locations.bzl, so they must be vendored
 # explicitly for offline builds.
 DISTFILES+=	${ENVOY_SRC_COMMIT}.zip:envoy_src
 MASTER_SITES+=	https://github.com/envoyproxy/envoy/archive/:envoy_src
 DISTFILES+=	V_10_2_P1.zip:openssh_portable
 MASTER_SITES+=	https://github.com/openssh/openssh-portable/archive/:openssh_portable
 DISTFILES+=	a413fcc9c46a020a746907136a384c227f3cd095.zip:magic_enum
 MASTER_SITES+=	https://github.com/Neargye/magic_enum/archive/:magic_enum
 DISTFILES+=	v1.0.7.zip:readerwriterqueue
 MASTER_SITES+=	https://github.com/cameron314/readerwriterqueue/archive/:readerwriterqueue
 
 # Envoy API repository_locations.bzl exact versions used by this wrapper build.
 DISTFILES+=	bazel-skylib-1.7.1.tar.gz:envoy_api_bazel_skylib
 MASTER_SITES+=	https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/:envoy_api_bazel_skylib
 DISTFILES+=	v1.0.4.zip:envoy_api_pgv
 MASTER_SITES+=	https://github.com/bufbuild/protoc-gen-validate/archive/refs/tags/:envoy_api_pgv
 DISTFILES+=	rules_jvm_external-6.1.tar.gz:envoy_api_rules_jvm_external
 MASTER_SITES+=	https://github.com/bazelbuild/rules_jvm_external/releases/download/6.1/:envoy_api_rules_jvm_external
 DISTFILES+=	114a745b2841a044e98cdbb19358ed29fcf4a5f1.tar.gz:envoy_api_googleapis
 MASTER_SITES+=	https://github.com/googleapis/googleapis/archive/:envoy_api_googleapis
 DISTFILES+=	v0.4.1.tar.gz:envoy_api_opencensus_proto
 MASTER_SITES+=	https://github.com/census-instrumentation/opencensus-proto/archive/:envoy_api_opencensus_proto
 DISTFILES+=	v0.6.1.tar.gz:envoy_api_prometheus_metrics_model
 MASTER_SITES+=	https://github.com/prometheus/client_model/archive/:envoy_api_prometheus_metrics_model
 DISTFILES+=	5.3.0-21.7.tar.gz:envoy_api_rules_proto
 MASTER_SITES+=	https://github.com/bazelbuild/rules_proto/archive/refs/tags/:envoy_api_rules_proto
 DISTFILES+=	buf-Linux-x86_64.tar.gz:envoy_api_buf
 MASTER_SITES+=	https://github.com/bufbuild/buf/releases/download/v1.32.2/:envoy_api_buf
 DISTFILES+=	v0.15.0.tar.gz:envoy_api_dev_cel
 MASTER_SITES+=	https://github.com/google/cel-spec/archive/:envoy_api_dev_cel
 DISTFILES+=	bazel-v0.1.3.tar.gz:envoy_api_toolshed
 MASTER_SITES+=	https://github.com/envoyproxy/toolshed/archive/:envoy_api_toolshed
 
 # Bazel-managed dependencies (GitHub archive format).
 # These are fetched by Bazel as http_archive during the build, sourced from
 # the codeload.github.com CDN, which produces the same sha256 as GitHub's
 # archive download.
 GH_TUPLE+=	aspect-build:bazel-lib:v2.16.0:aspect_bazel_lib \
 		grailbio:bazel-compilation-database:40864791135333e1446a04553b63cbe744d358d0:bazel_compdb \
 		bazelbuild:bazel-toolchains:v5.1.2:bazel_toolchains \
 		google:boringssl:0.20250514.0:boringssl \
 		civetweb:civetweb:v1.16:civetweb \
 		Kitware:CMake:v3.23.2:cmake_src \
 		aignas:rules_shellcheck:0.4.0:com_github_aignas_rules_shellcheck \
 		alibaba:hessian2-codec:6f5a64770f0374a761eece13c8863b80dc5adcd8:com_github_alibaba_hessian2_codec \
 		awslabs:aws-c-auth:v0.9.1:com_github_awslabs_aws_c_auth \
 		bazelbuild:buildtools:v8.2.1:com_github_bazelbuild_buildtools \
 		cncf:xds:8bfbf64dc13ee1a570be4fbdcfccbdd8532463f0:com_github_cncf_xds \
 		curl:curl:curl-8_5_0:com_github_curl \
 		DataDog:dd-trace-cpp:v0.2.2:com_github_datadog_dd_trace_cpp \
 		envoyproxy:sql-parser:3b40ba2d106587bdf053a292f7e3bb17e818a57f:com_github_envoyproxy_sqlparser \
 		FDio:vpp:8ca922e1d6d0fe8af28e539505d3c3a211642a91:com_github_fdio_vpp_vcl \
 		google:jwt_verify_lib:b59e8075d4a4f975ba6f109e1916d6e60aeb5613:com_github_google_jwt_verify \
 		google:libsxg:beaa3939b76f8644f6833267e9f2462760838f18:com_github_google_libsxg \
 		google:perfetto:v52.0:com_github_google_perfetto \
 		google:quiche:9d155f645b33e283ca741ba16002a71ed382cbf0:com_github_google_quiche \
 		google:tcmalloc:0c3faab546c22d67e11327c6c6c7c34c1707c5db:com_github_google_tcmalloc \
 		grpc:grpc:v1.72.0:com_github_grpc_grpc \
 		libevent:libevent:62c152d9a7cd264b993dad730c4163c6ede2e0a3:com_github_libevent_libevent \
 		LuaJIT:LuaJIT:871db2c84ecefd70a850e03a6c340214a81739f0:com_github_luajit_luajit \
 		ncopa:su-exec:v0.3:com_github_ncopa_suexec \
 		openhistogram:libcircllhist:39f9db724a81ba78f5d037f1cae79c5a07107c8e:com_github_openhistogram_libcircllhist \
 		openzipkin:zipkin-api:1.0.0:com_github_openzipkin_zipkinapi \
 		SkyAPM:cpp2sky:v0.6.0:com_github_skyapm_cpp2sky \
 		unicode-org:icu:release-77-1:com_github_unicode_org_icu \
 		zlib-ng:zlib-ng:2.2.5:com_github_zlib_ng_zlib_ng \
 		abseil:abseil-cpp:20250814.1:com_google_absl \
 		google:cel-cpp:v0.13.0:com_google_cel_cpp \
 		google:cel-spec:v0.24.0:com_google_cel_spec \
 		googleapis:googleapis:fd52b5754b2b268bc3a22a10f29844f206abb327:com_google_googleapis \
 		confluentinc:librdkafka:v2.6.0:confluentinc_librdkafka \
 		cython:cython:0.29.35:cython \
 		envoyproxy:examples:v0.1.2:envoy_examples \
 		envoyproxy:data-plane-api:f8b75d1efa92bbf534596a013d9ca5873f79dd30:envoy_api \
 		envoyproxy:toolshed:bazel-v0.3.3:envoy_toolshed \
 		fastfloat:fast_float:v7.0.0:fast_float \
 		ninja-build:ninja:v1.13.1:fips_ninja \
 		google:gurl:dd4080fec0b443296c0ed0036e1e776df8813aa7:googleurl \
 		grpc-ecosystem:grpc-httpjson-transcoding:a6e226f9a2e656a973df3ad48f0ee5efacce1a28:grpc_httpjson_transcoding \
 		google:highway:1.2.0:highway \
 		open-telemetry:opentelemetry-cpp:v1.23.0:io_opentelemetry_cpp \
 		ninja-build:ninja:v1.11.1:ninja_build_src \
 		numactl:numactl:v2.0.19:numactl \
 		open-telemetry:opentelemetry-proto:v1.9.0:opentelemetry_proto \
 		prometheus:client_model:v0.6.2:prometheus_metrics_model \
 		proxy-wasm:proxy-wasm-cpp-host:65bb78fbf8beb6d3670701d35711e691c0c4c4ce:proxy_wasm_cpp_host \
 		proxy-wasm:proxy-wasm-cpp-sdk:dc4f37efacd2ff7bf2e8f36632f22e1e99347f3e:proxy_wasm_cpp_sdk \
 		bufbuild:rules_buf:v0.5.2:rules_buf \
 		bazelbuild:rules_foreign_cc:0.15.1:rules_foreign_cc \
 		bazelbuild:rules_fuzzing:v0.6.0:rules_fuzzing \
 		bazelbuild:rules_python:1.6.3:rules_python \
 		protocolbuffers:rules_ruby:37cf5900d0b0e44fa379c0ea3f5fcee0035d77ca:rules_ruby \
 		apache:skywalking-data-collect-protocol:v10.2.0:skywalking_data_collect_protocol \
 		apache:thrift:v0.22.0:thrift \
 		census-instrumentation:opencensus-cpp:5501a1a255805e0be83a41348bb5f2630d5ed6b3:io_opencensus_cpp \
 		census-instrumentation:opencensus-proto:v0.3.0:opencensus_proto \
 		Linaro:uadk:v2.9:uadk \
 		protocolbuffers:utf8_range:de0b4a8ff9b5d4c98108bdfe723291a33c52c54f:utf8_range \
 		v8:v8:13.8.258.26:v8 \
 		bytecodealliance:wasm-micro-runtime:WAMR-2.2.0:com_github_wamr \
 		bytecodealliance:wasmtime:v24.0.4:com_github_wasmtime \
 		intel:ittapi:a3911fff01a775023a06af8754f9ec1e5977dd97:intel_ittapi
 
 # Non-GitHub Bazel dependencies (not expressible via GH_TUPLE).
 # These use releases/download or .zip archives; GH_TUPLE downloads codeload
 # archives with different SHA256 values that would not match the checksums
 # in repository_locations.bzl.
 DISTFILES+=	bazel_features-v1.36.0.tar.gz:bazel_features
 MASTER_SITES+=	https://github.com/bazel-contrib/bazel_features/releases/download/v1.36.0/:bazel_features
 DISTFILES+=	bazel-gazelle-v0.45.0.tar.gz:bazel_gazelle
 MASTER_SITES+=	https://github.com/bazelbuild/bazel-gazelle/releases/download/v0.45.0/:bazel_gazelle
 # package_metadata: registered by gazelle_dependencies() in bazel_gazelle/deps.bzl (not in repository_locations.bzl)
 DISTFILES+=	supply-chain-v0.0.5.tar.gz:package_metadata
 MASTER_SITES+=	https://github.com/bazel-contrib/supply-chain/releases/download/v0.0.5/:package_metadata
 DISTFILES+=	bazel-skylib-1.8.2.tar.gz:bazel_skylib
 MASTER_SITES+=	https://github.com/bazelbuild/bazel-skylib/releases/download/1.8.2/:bazel_skylib
 DISTFILES+=	msgpack-cxx-6.1.0.tar.gz:com_github_msgpack_cpp
 MASTER_SITES+=	https://github.com/msgpack/msgpack-c/releases/download/cpp-6.1.0/:com_github_msgpack_cpp
 DISTFILES+=	googletest-1.17.0.tar.gz:com_google_googletest
 MASTER_SITES+=	https://github.com/google/googletest/releases/download/v1.17.0/:com_google_googletest
 DISTFILES+=	gperftools-2.17.2.tar.gz:gperftools
 MASTER_SITES+=	https://github.com/gperftools/gperftools/releases/download/gperftools-2.17.2/:gperftools
 DISTFILES+=	rules_go-v0.59.0.zip:io_bazel_rules_go
 MASTER_SITES+=	https://github.com/bazelbuild/rules_go/releases/download/v0.59.0/:io_bazel_rules_go
 DISTFILES+=	rules_cc-0.2.8.tar.gz:rules_cc
 MASTER_SITES+=	https://github.com/bazelbuild/rules_cc/releases/download/0.2.8/:rules_cc
 DISTFILES+=	rules_java-7.12.5.tar.gz:rules_java
 MASTER_SITES+=	https://github.com/bazelbuild/rules_java/releases/download/7.12.5/:rules_java
 # remote_java_tools: registered by rules_java_builtin (Bazel-embedded) via DEFAULT.WORKSPACE.SUFFIX
 # Bazel 7.7.1 embeds rules_java using java_tools v13.6.1 (not v13.9 from rules_java-7.12.5)
 DISTFILES+=	java_tools-v13.6.1.zip:remote_java_tools
 MASTER_SITES+=	https://github.com/bazelbuild/java_tools/releases/download/java_13.6.1/:remote_java_tools
 DISTFILES+=	rules_license-1.0.0.tar.gz:rules_license
 MASTER_SITES+=	https://github.com/bazelbuild/rules_license/releases/download/1.0.0/:rules_license
 # rules_proto: used via api/bazel/repository_locations.bzl with refs/tags URL (sha differs from GH_TUPLE codeload)
 DISTFILES+=	7.1.0.tar.gz:rules_proto_src
 MASTER_SITES+=	https://github.com/bazelbuild/rules_proto/archive/refs/tags/:rules_proto_src
 DISTFILES+=	rules_proto_grpc-4.6.0.tar.gz:rules_proto_grpc
 MASTER_SITES+=	https://github.com/rules-proto-grpc/rules_proto_grpc/releases/download/4.6.0/:rules_proto_grpc
 DISTFILES+=	rules_rust-0.56.0.tar.gz:rules_rust
 MASTER_SITES+=	https://github.com/bazelbuild/rules_rust/releases/download/0.56.0/:rules_rust
 DISTFILES+=	rules_shell-v0.6.1.tar.gz:rules_shell
 MASTER_SITES+=	https://github.com/bazelbuild/rules_shell/releases/download/v0.6.1/:rules_shell
 DISTFILES+=	singleheader.zip:simdutf
 MASTER_SITES+=	https://github.com/simdutf/simdutf/releases/download/v7.3.4/:simdutf
 DISTFILES+=	toolchains_llvm-v1.6.0.tar.gz:toolchains_llvm
 MASTER_SITES+=	https://github.com/bazel-contrib/toolchains_llvm/releases/download/v1.6.0/:toolchains_llvm
 DISTFILES+=	v1.3.0.zip:com_envoyproxy_protoc_gen_validate
 MASTER_SITES+=	https://github.com/bufbuild/protoc-gen-validate/archive/refs/tags/:com_envoyproxy_protoc_gen_validate
 DISTFILES+=	7680e4998426e62b6896995ff73d4d91cc5fb13c.zip:com_github_chrusty_protoc_gen_jsonschema
 MASTER_SITES+=	https://github.com/norbjd/protoc-gen-jsonschema/archive/:com_github_chrusty_protoc_gen_jsonschema
 # packages with conflicting URL basenames: use releases/download for unique filenames
 DISTFILES+=	1.1.0.tar.gz:rules_pkg
 MASTER_SITES+=	https://github.com/bazelbuild/rules_pkg/archive/:rules_pkg
 # platforms (1.0.0.tar.gz) conflicts with com_github_openzipkin_zipkinapi (1.0.0.tar.gz)
 DISTFILES+=	platforms-1.0.0.tar.gz:platforms
 MASTER_SITES+=	https://github.com/bazelbuild/platforms/releases/download/1.0.0/:platforms
 DISTFILES+=	protobuf-29.3.tar.gz:com_google_protobuf
 MASTER_SITES+=	https://github.com/protocolbuffers/protobuf/releases/download/v29.3/:com_google_protobuf
 DISTFILES+=	glib-2.26.1.tar.gz:glib_src
 MASTER_SITES+=	https://download.gnome.org/sources/glib/2.26/:glib_src
 DISTFILES+=	pkg-config-0.29.2.tar.gz:pkgconfig_src
 MASTER_SITES+=	https://pkgconfig.freedesktop.org/releases/:pkgconfig_src
 # GitHub packages using .zip format in repository_locations.bzl (not compatible with
 # GH_TUPLE which always downloads codeload tar.gz with a different SHA256)
 DISTFILES+=	1db76535b86b80aa97489a1edcc7009e18b67ab7.zip:com_google_protoconverter
 MASTER_SITES+=	https://github.com/grpc-ecosystem/proto-converter/archive/:com_google_protoconverter
 DISTFILES+=	d5d39f0373e9b6691c32c85929838b1006bcb3fb.zip:com_google_protofieldextraction
 MASTER_SITES+=	https://github.com/grpc-ecosystem/proto-field-extraction/archive/:com_google_protofieldextraction
 DISTFILES+=	279353cfab372ac7f268ae529df29c4d546ca18d.zip:com_google_protoprocessinglib
 MASTER_SITES+=	https://github.com/grpc-ecosystem/proto_processing_lib/archive/:com_google_protoprocessinglib
 DISTFILES+=	6c7c925b571d54486b9ffae8d9d18a822801cbda.zip:dragonbox
 MASTER_SITES+=	https://github.com/jk-jeon/dragonbox/archive/:dragonbox
 DISTFILES+=	0a92994d729ff76a58f692d3028ca1b64b145d91.zip:fp16
 MASTER_SITES+=	https://github.com/Maratyszcza/FP16/archive/:fp16
 DISTFILES+=	e965ac0ac6db6686169678e2a6c77ede904fa82c.zip:ocp
 MASTER_SITES+=	https://github.com/opencomputeproject/ocp-diag-core/archive/:ocp
 DISTFILES+=	3.9.1.zip:kafka_source
 MASTER_SITES+=	https://github.com/apache/kafka/archive/:kafka_source
 # antlr4_jar: http_jar in cel-cpp/bazel/deps.bzl; the first distfiles loop symlinks by basename
 DISTFILES+=	antlr-4.13.1-complete.jar:antlr4_jar
 MASTER_SITES+=	https://www.antlr.org/download/:antlr4_jar
 # antlr4_runtimes: defined inline in cel-cpp/bazel/deps.bzl, not in repository_locations.bzl
 # The pre-build distfiles loop auto-symlinks it as 4.13.1.zip in bazel-distdir
 DISTFILES+=	4.13.1.zip:antlr4_runtimes
 MASTER_SITES+=	https://github.com/antlr/antlr4/archive/refs/tags/:antlr4_runtimes
 
 # Go module dependencies (go_repository rules in bazel/dependency_imports.bzl).
 # proxy.golang.org always serves these as v{version}.zip; basenames are unique.
 # genproto/api and genproto/rpc share a pseudo-version → single GitHub commit
 # archive serves both (different strip_prefix in each go_repository rule).
 # Go protoc-gen-validate uses .tar.gz to avoid conflict with C++ v1.3.0.zip.
 DISTFILES+=	v1.68.0.zip:org_golang_google_grpc
 MASTER_SITES+=	https://proxy.golang.org/google.golang.org/grpc/@v/:org_golang_google_grpc
 DISTFILES+=	v0.34.0.zip:org_golang_x_net
 MASTER_SITES+=	https://proxy.golang.org/golang.org/x/net/@v/:org_golang_x_net
 DISTFILES+=	v0.21.0.zip:org_golang_x_text
 MASTER_SITES+=	https://proxy.golang.org/golang.org/x/text/@v/:org_golang_x_text
 # genproto/api and genproto/rpc both live in the go-genproto monorepo at this commit
 DISTFILES+=	ab9386a59fda.zip:org_golang_google_genproto
 MASTER_SITES+=	https://github.com/googleapis/go-genproto/archive/:org_golang_google_genproto
 DISTFILES+=	v1.36.10.zip:org_golang_google_protobuf
 MASTER_SITES+=	https://proxy.golang.org/google.golang.org/protobuf/@v/:org_golang_google_protobuf
 DISTFILES+=	v0.0.0-20251110193048-8bfbf64dc13e.zip:com_github_cncf_xds_go
 MASTER_SITES+=	https://proxy.golang.org/github.com/cncf/xds/go/@v/:com_github_cncf_xds_go
 DISTFILES+=	v0.25.1.zip:dev_cel_expr
 MASTER_SITES+=	https://proxy.golang.org/cel.dev/expr/@v/:dev_cel_expr
 DISTFILES+=	v1.10.0.zip:com_github_spf13_afero
 MASTER_SITES+=	https://proxy.golang.org/github.com/spf13/afero/@v/:com_github_spf13_afero
 DISTFILES+=	v2.0.4-0.20230330145011-496ad1ac90a4.zip:com_github_lyft_protoc_gen_star_v2
 MASTER_SITES+=	https://proxy.golang.org/github.com/lyft/protoc-gen-star/v2/@v/:com_github_lyft_protoc_gen_star_v2
 DISTFILES+=	v0.3.0.zip:com_github_iancoleman_strcase
 MASTER_SITES+=	https://proxy.golang.org/github.com/iancoleman/strcase/@v/:com_github_iancoleman_strcase
 DISTFILES+=	v0.6.1-0.20240409071808-615f978279ca.zip:com_github_planetscale_vtprotobuf
 MASTER_SITES+=	https://proxy.golang.org/github.com/planetscale/vtprotobuf/@v/:com_github_planetscale_vtprotobuf
 DISTFILES+=	v1.5.0.zip:com_github_golang_protobuf
 MASTER_SITES+=	https://proxy.golang.org/github.com/golang/protobuf/@v/:com_github_golang_protobuf
 # .tar.gz avoids conflict with C++ protoc-gen-validate v1.3.0.zip
 DISTFILES+=	v1.3.0.tar.gz:com_github_envoyproxy_protoc_gen_validate_go
 MASTER_SITES+=	https://github.com/envoyproxy/protoc-gen-validate/archive/refs/tags/:com_github_envoyproxy_protoc_gen_validate_go
 # chrusty/protoc-gen-jsonschema transitive Go dependencies (go_repository rules in deps.bzl).
 # Conflicting basenames resolved by adding only the non-test module of each pair:
 #   v1.1.1.zip: go-spew (keep) vs kr/pty (skip; test-only)
 #   v1.0.0.zip: fatih/camelcase (keep) vs pmezard/go-difflib (skip; test-only)
 #   v0.1.0.zip: kr/pretty + kr/text (both skip; test-only)
 #   v0.7.0.zip: golang.org/x/sys (keep) vs golang.org/x/tools (skip; not imported by plugin binary)
 DISTFILES+=	v0.0.0-20210918223802-a1d3f4b43d7b.zip:com_github_alecthomas_jsonschema
 MASTER_SITES+=	https://proxy.golang.org/github.com/alecthomas/jsonschema/@v/:com_github_alecthomas_jsonschema
 DISTFILES+=	v1.1.1.zip:com_github_davecgh_go_spew
 MASTER_SITES+=	https://proxy.golang.org/github.com/davecgh/go-spew/@v/:com_github_davecgh_go_spew
 DISTFILES+=	v1.0.0.zip:com_github_fatih_camelcase
 MASTER_SITES+=	https://proxy.golang.org/github.com/fatih/camelcase/@v/:com_github_fatih_camelcase
 DISTFILES+=	v0.5.5.zip:com_github_google_go_cmp
 MASTER_SITES+=	https://proxy.golang.org/github.com/google/go-cmp/@v/:com_github_google_go_cmp
 DISTFILES+=	v0.2.0.zip:com_github_iancoleman_orderedmap
 MASTER_SITES+=	https://proxy.golang.org/github.com/iancoleman/orderedmap/@v/:com_github_iancoleman_orderedmap
 DISTFILES+=	v1.4.2.zip:com_github_sirupsen_logrus
 MASTER_SITES+=	https://proxy.golang.org/github.com/sirupsen/logrus/@v/:com_github_sirupsen_logrus
 DISTFILES+=	v0.1.1.zip:com_github_stretchr_objx
 MASTER_SITES+=	https://proxy.golang.org/github.com/stretchr/objx/@v/:com_github_stretchr_objx
 DISTFILES+=	v1.6.1.zip:com_github_stretchr_testify
 MASTER_SITES+=	https://proxy.golang.org/github.com/stretchr/testify/@v/:com_github_stretchr_testify
 DISTFILES+=	v0.0.0-20190809123943-df4f5c81cb3b.zip:com_github_xeipuuv_gojsonpointer
 MASTER_SITES+=	https://proxy.golang.org/github.com/xeipuuv/gojsonpointer/@v/:com_github_xeipuuv_gojsonpointer
 DISTFILES+=	v0.0.0-20180127040603-bd5ef7bd5415.zip:com_github_xeipuuv_gojsonreference
 MASTER_SITES+=	https://proxy.golang.org/github.com/xeipuuv/gojsonreference/@v/:com_github_xeipuuv_gojsonreference
 DISTFILES+=	v1.2.0.zip:com_github_xeipuuv_gojsonschema
 MASTER_SITES+=	https://proxy.golang.org/github.com/xeipuuv/gojsonschema/@v/:com_github_xeipuuv_gojsonschema
 DISTFILES+=	v1.0.0-20180628173108-788fd7840127.zip:gopkg_in_check_v1
 MASTER_SITES+=	https://proxy.golang.org/gopkg.in/check.v1/@v/:gopkg_in_check_v1
 DISTFILES+=	v3.0.0-20200313102051-9f266ea9e77c.zip:gopkg_in_yaml_v3
 MASTER_SITES+=	https://proxy.golang.org/gopkg.in/yaml.v3/@v/:gopkg_in_yaml_v3
 DISTFILES+=	v0.0.0-20210508222113-6edffad5e616.zip:org_golang_x_lint
 MASTER_SITES+=	https://proxy.golang.org/golang.org/x/lint/@v/:org_golang_x_lint
 DISTFILES+=	v0.9.0.zip:org_golang_x_mod
 MASTER_SITES+=	https://proxy.golang.org/golang.org/x/mod/@v/:org_golang_x_mod
 DISTFILES+=	v0.7.0.zip:org_golang_x_sys
 MASTER_SITES+=	https://proxy.golang.org/golang.org/x/sys/@v/:org_golang_x_sys
 DISTFILES+=	v0.0.0-20191204190536-9bdfabe68543.zip:org_golang_x_xerrors
 MASTER_SITES+=	https://proxy.golang.org/golang.org/x/xerrors/@v/:org_golang_x_xerrors
 
 PLIST_FILES=	libexec/pomerium-envoy
 
 .include <bsd.port.options.mk>
 
 .if ${ARCH} == amd64
 BAZEL_CPU=	freebsd_x86_64
 BUILD_DEPENDS+=	${LOCALBASE}/include/hs/hs.h:devel/hyperscan
 .elif ${ARCH} == aarch64
 BAZEL_CPU=	freebsd_aarch64
 BUILD_DEPENDS+=	${LOCALBASE}/include/hs/hs.h:devel/vectorscan
 .endif
 
 BAZEL_STARTUP_OPTS=	--output_base=${WRKDIR}/bazel-out
 
 BAZEL_BUILD_OPTS=	--distdir=${WRKDIR}/bazel-distdir \
 			--repository_disable_download \
 			--java_runtime_version=local_jdk \
 			--tool_java_runtime_version=local_jdk \
 			--repo_env=JAVA_HOME=${JAVA_HOME} \
 			--action_env=JAVA_HOME=${JAVA_HOME} \
 			--action_env=PATH=${WRKDIR}/bin:${LOCALBASE}/bin:/usr/bin:/bin \
 			--action_env=CC=${CC} --action_env=CXX=${CXX} \
 			--action_env=PYTHONPATH=${PYTHON_SITELIBDIR} \
 			--host_action_env=JAVA_HOME=${JAVA_HOME} \
 			--host_action_env=PATH=${WRKDIR}/bin:${LOCALBASE}/bin:/usr/bin:/bin \
 			--host_action_env=PYTHONPATH=${PYTHON_SITELIBDIR} \
 			--override_repository=com_github_fmtlib_fmt=${WRKDIR}/sys_repos/fmt \
 			--override_repository=com_github_mirror_tclap=${WRKDIR}/sys_repos/tclap \
 			--override_repository=com_github_nlohmann_json=${WRKDIR}/sys_repos/nlohmann-json \
 			--override_repository=com_github_gabime_spdlog=${WRKDIR}/sys_repos/spdlog \
 			--override_repository=com_github_cyan4973_xxhash=${WRKDIR}/sys_repos/xxhash \
 			--override_repository=com_github_cares_cares=${WRKDIR}/sys_repos/c-ares \
 			--override_repository=com_github_jbeder_yaml_cpp=${WRKDIR}/sys_repos/yaml-cpp \
 			--override_repository=com_googlesource_code_re2=${WRKDIR}/sys_repos/re2 \
 			--override_repository=zstd=${WRKDIR}/sys_repos/zstd \
 			--override_repository=org_brotli=${WRKDIR}/sys_repos/brotli \
 			--override_repository=com_github_google_flatbuffers=${WRKDIR}/sys_repos/flatbuffers \
 			--override_repository=zlib=${WRKDIR}/sys_repos/zlib \
 			--override_repository=net_zlib=${WRKDIR}/sys_repos/zlib \
 			--override_repository=com_github_nghttp2_nghttp2=${WRKDIR}/sys_repos/nghttp2 \
 			--override_repository=com_github_maxmind_libmaxminddb=${WRKDIR}/sys_repos/libmaxminddb \
 			--override_repository=build_bazel_rules_apple=${WRKDIR}/sys_repos/apple_stub \
 			--override_repository=base_pip3=${WRKDIR}/sys_repos/base_pip3 \
 			--override_repository=io_hyperscan=${WRKDIR}/sys_repos/hyperscan \
 			--override_repository=io_vectorscan=${WRKDIR}/sys_repos/vectorscan \
 			--override_repository=com_github_c_ares_c_ares=${WRKDIR}/sys_repos/c-ares \
 			--override_repository=com_github_facebook_zstd=${WRKDIR}/sys_repos/zstd \
 			--override_repository=emsdk=${WRKDIR}/sys_repos/emsdk \
 			--override_repository=proxy_wasm_rust_sdk=${WRKDIR}/sys_repos/proxy_wasm_rust_sdk \
 			--override_repository=com_github_axboe_liburing=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=fips_cmake_linux_aarch64=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=fips_cmake_linux_x86_64=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=fips_go_linux_amd64=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=fips_go_linux_arm64=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=intel_dlb=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=kafka_server_binary=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=libpfm=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=org_llvm_releases_compiler_rt=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=aws_lc=${WRKDIR}/sys_repos/empty_stub \
 			--override_repository=libinotify=${WRKDIR}/sys_repos/libinotify \
 			--override_repository=platforms=${WRKDIR}/sys_repos/platforms \
 			--override_repository=com_github_golang_protobuf=${WRKDIR}/sys_repos/com_github_golang_protobuf \
 			--override_repository=com_github_cncf_xds=${WRKDIR}/sys_repos/com_github_cncf_xds \
 			--override_repository=com_github_iancoleman_strcase=${WRKDIR}/sys_repos/com_github_iancoleman_strcase \
 			--override_repository=prometheus_metrics_model=${WRKDIR}/sys_repos/prometheus_metrics_model \
 			--override_repository=rules_fuzzing=${WRKDIR}/sys_repos/rules_fuzzing \
 			--override_repository=rules_buf=${WRKDIR}/sys_repos/rules_buf \
 			--override_repository=opentelemetry_proto=${WRKDIR}/sys_repos/opentelemetry_proto \
 			--override_repository=ninja_build_src=${WRKDIR}/sys_repos/ninja_build_src \
 			--override_repository=envoy_toolshed=${WRKDIR}/sys_repos/envoy_toolshed \
 			--override_repository=com_google_googleapis=${WRKDIR}/sys_repos/com_google_googleapis \
 			--override_repository=org_golang_google_protobuf=${WRKDIR}/sys_repos/org_golang_google_protobuf \
 			--override_repository=org_golang_x_text=${WRKDIR}/sys_repos/org_golang_x_text \
 			--override_repository=python3_11=${WRKDIR}/sys_repos/python3_11 \
 			--override_repository=pip3=${WRKDIR}/sys_repos/pip3_stub \
 			--override_repository=dev_pip3=${WRKDIR}/sys_repos/pip3_stub \
 			--override_repository=fuzzing_pip3=${WRKDIR}/sys_repos/pip3_stub \
 			--override_repository=io_bazel_rules_go=${WRKDIR}/sys_repos/io_bazel_rules_go \
 			--override_repository=com_google_absl=${WRKDIR}/sys_repos/com_google_absl \
+			--override_repository=envoy=${WRKDIR}/envoy-src \
 			--action_env=MAKE=${GMAKE} --host_linkopt=-lm \
 			--linkopt=-lm --linkopt=-L${LOCALBASE}/lib \
 			--cxxopt=-Wno-nullability-completeness \
 			--host_cxxopt=-Wno-nullability-completeness \
 			--copt=-fPIC --cxxopt=-fPIC --host_copt=-fPIC \
 			--host_cxxopt=-fPIC --define tcmalloc=gperftools \
 			--define hot_restart=disabled \
 			--repo_env=GOPROXY=file://${WRKDIR}/goproxy,off \
 			--repo_env=GONOSUMDB=* \
 			--workspace_status_command=${WRKDIR}/workspace_status.sh \
 			-c opt
 
 BAZEL_ENV=	HOME=${WRKDIR}/.home XDG_CACHE_HOME=${WRKDIR}/.cache
 
 .if ${OPSYS} == FreeBSD && ${OSVERSION} < 1500051
 BUILD_DEPENDS+=	${LOCALBASE}/include/sys/inotify.h:devel/libinotify
 LIB_DEPENDS+=	libinotify.so:devel/libinotify
 LIBINOTIFY_IS_REAL=	yes
 .endif
 
 post-patch:
 	${CP} ${FILESDIR}/rules_buf_freebsd.patch \
 		${WRKSRC}/bazel/rules_buf.patch
 	${CP} ${FILESDIR}/rules_foreign_cc_freebsd.patch \
 		${WRKSRC}/bazel/rules_foreign_cc.patch
 	${CP} ${FILESDIR}/protoc_gen_validate_freebsd.patch \
 		${WRKSRC}/bazel/protoc_gen_validate_freebsd.patch
 # FreeBSD: patch dependency_imports.bzl inside @envoy to use the host Go toolchain
 # and preinstalled foreign_cc tools instead of downloading/building them.  The
 # patch file lives in patches/envoy/ (which is part of the pomerium-envoy-custom
 # source) and is referenced by the @envoy http_archive patches list in WORKSPACE.
 	${CP} ${FILESDIR}/envoy_freebsd-dependency-imports.patch \
 		${WRKSRC}/patches/envoy/freebsd-dependency-imports.patch
 	for f in go-sdk \
 	    foreign-cc-ares \
 	    foreign-cc-zlib \
 	    foreign-cc-zstd \
 	    foreign-cc-nghttp2 \
 	    foreign-cc-maxmind \
 	    maxmind-extension \
 	    foreign-cc-luajit \
 	    luajit \
 	    platform \
 	    terminate-thread \
 	    thread-impl \
 	    address-impl \
 	    io-socket-handle-impl-h \
 	    io-socket-handle-impl-cc \
 	    lz4-qat-removal \
 	    inotify \
 	    rules-foreign-cc \
 	    envoy-cmake-generate-args; do \
 	    ${CP} ${FILESDIR}/patches_envoy_freebsd-$$f.patch \
 	        ${WRKSRC}/patches/envoy/freebsd-$$f.patch; \
 	done
 
 pre-build:
+# Pre-extract @envoy upstream source and apply all patches ourselves.
+# Bypasses Bazel's http_archive patch mechanism, which does not reliably
+# invalidate the cached external-repo when patch file content changes.
+# --override_repository=envoy=... (in BAZEL_BUILD_OPTS) tells Bazel to use
+# this pre-patched local directory instead of fetching via http_archive.
+	${RM} -rf ${WRKDIR}/envoy-src
+	${MKDIR} ${WRKDIR}/envoy-src
+	${TAR} xf ${DISTDIR}/${DIST_SUBDIR}/${ENVOY_SRC_COMMIT}.zip \
+		--strip-components=1 \
+		-C ${WRKDIR}/envoy-src
+	for f in \
+	    0001-revert-deps-drop-BoringSSL-linkstatic-patch-38621.patch \
+	    0002-bump-dependencies.patch \
+	    0003-envoy-copts.patch \
+	    0004-pgv.patch \
+	    0005-suppress-duplicate-wip-warnings.patch \
+	    0006-coverage-format.patch \
+	    0007-user-space-io-handle.patch \
+	    0008-cel-cpp-compatibility.patch \
+	    tmp-envoy-41815.patch \
+	    tmp-transport-socket-options.patch \
+	    freebsd-rules-foreign-cc.patch \
+	    freebsd-dependency-imports.patch \
+	    freebsd-envoy-cmake-generate-args.patch \
+	    freebsd-foreign-cc-ares.patch \
+	    freebsd-foreign-cc-nghttp2.patch \
+	    freebsd-foreign-cc-maxmind.patch \
+	    freebsd-maxmind-extension.patch \
+	    freebsd-foreign-cc-zlib.patch \
+	    freebsd-foreign-cc-zstd.patch \
+	    freebsd-foreign-cc-luajit.patch \
+	    freebsd-luajit.patch \
+	    freebsd-platform.patch \
+	    freebsd-terminate-thread.patch \
+	    freebsd-thread-impl.patch \
+	    freebsd-address-impl.patch \
+	    freebsd-io-socket-handle-impl-h.patch \
+	    freebsd-io-socket-handle-impl-cc.patch \
+	    freebsd-lz4-qat-removal.patch \
+	    freebsd-inotify.patch; do \
+	    ${PATCH} -p1 -d ${WRKDIR}/envoy-src < ${WRKSRC}/patches/envoy/$$f || exit 1; \
+	done
+# Also clear any stale Bazel-cached @envoy tree (safety net).
+	${RM} -rf ${WRKDIR}/bazel-out/external/envoy \
+	           ${WRKDIR}/bazel-out/external/envoy.marker
 	for f in rules_python_py_runtime_info_freebsd.patch \
 	    rules_python_py_executable_freebsd.patch \
 	    rules_python_runtime_env_toolchain_freebsd.patch; do \
 	    ${MV} ${WRKDIR}/$$f ${WRKSRC}/bazel/$$f; \
 	done
 # Prepend ${WRKDIR}/bin to action PATH so rules_foreign_cc's generated build_script.sh
 # picks up GNU make (gmake) when it calls "make" directly, before /usr/bin/make (BSD make).
 	@${MKDIR} ${WRKDIR}/bin
 	@${LN} -sf ${GMAKE} ${WRKDIR}/bin/make
 # Create SOURCE_VERSION so get_workspace_status skips git (distribution build path).
 # Must be a hex string: Bazel's gnu_build_id genrule prefixes it with 0x for --build-id.
 	${PRINTF} "pomerium-envoy-%s" "${PORTVERSION}" | sha256 -q > ${WRKSRC}/SOURCE_VERSION
 # Workspace status script: .bazelrc sets --workspace_status_command=bazel/bazel_get_workspace_status
 # which does not exist in the extracted source.  Override via --workspace_status_command in
 # BAZEL_BUILD_OPTS; this script outputs the stable key Bazel needs for stamped builds.
 # Generated from files/workspace_status.sh.in via SUB_LIST/SUB_FILES (%%WRKSRC%% substituted).
 	@${CHMOD} +x ${WRKDIR}/workspace_status.sh
 	@${ECHO_MSG} "===> Setting up Bazel override repositories for system libraries"
 	@${MKDIR} ${WRKDIR}/.home ${WRKDIR}/.cache
 # platforms: rules_foreign_cc_dependencies() registers @platforms via maybe(http_archive),
 # but Bazel 7's embedded @platforms does not appear in existing_rules() so maybe() proceeds
 # to fetch it (fails: download disabled).  Override with the real 1.0.0 archive so all
 # http_archive registrations see it already defined.
 	@${MKDIR} ${WRKDIR}/sys_repos/platforms
 	@${TAR} -xzf ${DISTDIR}/${DIST_SUBDIR}/platforms-1.0.0.tar.gz \
 		-C ${WRKDIR}/sys_repos/platforms
 # com_github_golang_protobuf: rules_go registers this as an http_archive at v1.5.4 with
 # a gazelle patch, but we only vendor the Go module source zip.  Recreate an equivalent
 # local repo from the vendored module zip and apply rules_go's BUILD file patch.
 	@${MKDIR} ${WRKDIR}/sys_repos/com_github_golang_protobuf
 	@${UNZIP_CMD} -q ${DISTDIR}/${DIST_SUBDIR}/v1.5.0.zip \
 		-d ${WRKDIR}/sys_repos/com_github_golang_protobuf
 	@cd ${WRKDIR}/sys_repos/com_github_golang_protobuf && \
 		for path in github.com/golang/protobuf@v1.5.0/*; do \
 			${MV} "$$path" .; \
 		done
 	@${RM} -r ${WRKDIR}/sys_repos/com_github_golang_protobuf/github.com
 	@echo 'workspace(name = "com_github_golang_protobuf")' > \
 		${WRKDIR}/sys_repos/com_github_golang_protobuf/WORKSPACE
 	@bsdtar -xOf ${DISTDIR}/${DIST_SUBDIR}/rules_go-v0.59.0.zip \
 		third_party/com_github_golang_protobuf-gazelle.patch \
 		> ${WRKDIR}/com_github_golang_protobuf-gazelle.patch
 	@cd ${WRKDIR}/sys_repos/com_github_golang_protobuf && \
 		${PATCH} -p1 < ${WRKDIR}/com_github_golang_protobuf-gazelle.patch
 # com_github_cncf_xds: the embedded envoy_api fetches commit 555b57 which predates
 # keep_matching in OnMatch; the pomerium envoy C++ source already uses keep_matching,
 # so override with the newer 8bfbf64 commit (already downloaded via GH_TUPLE) that
 # includes keep_matching = 3 in xds/type/matcher/v3/matcher.proto.
 	@${MKDIR} ${WRKDIR}/sys_repos/com_github_cncf_xds
 	@${TAR} -xzf ${DISTDIR}/${DIST_SUBDIR}/cncf-xds-8bfbf64dc13ee1a570be4fbdcfccbdd8532463f0_GH0.tar.gz \
 		--strip-components=1 \
 		-C ${WRKDIR}/sys_repos/com_github_cncf_xds
 	@echo 'workspace(name = "com_github_cncf_xds")' > \
 		${WRKDIR}/sys_repos/com_github_cncf_xds/WORKSPACE
 # com_github_iancoleman_strcase: patched nested Envoy requests v0.2.0 via go_repository,
 # but the port already vendors v0.3.0.  Override with a tiny local repo exposing //:strcase.
 	@${MKDIR} ${WRKDIR}/sys_repos/com_github_iancoleman_strcase
 	@${UNZIP_CMD} -q ${DISTDIR}/${DIST_SUBDIR}/v0.3.0.zip \
 		-d ${WRKDIR}/sys_repos/com_github_iancoleman_strcase
 	@cd ${WRKDIR}/sys_repos/com_github_iancoleman_strcase && \
 		for path in github.com/iancoleman/strcase@v0.3.0/*; do \
 			${MV} "$$path" .; \
 		done
 	@${RM} -r ${WRKDIR}/sys_repos/com_github_iancoleman_strcase/github.com
 	@echo 'workspace(name = "com_github_iancoleman_strcase")' > \
 		${WRKDIR}/sys_repos/com_github_iancoleman_strcase/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_iancoleman_strcase.BUILD.bazel \
 		${WRKDIR}/sys_repos/com_github_iancoleman_strcase/BUILD.bazel
 # fmt: header-only (FMT_HEADER_ONLY), devel/libfmt
 	@${MKDIR} ${WRKDIR}/sys_repos/fmt
 	@echo "" > ${WRKDIR}/sys_repos/fmt/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_fmt.BUILD.bazel ${WRKDIR}/sys_repos/fmt/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include ${WRKDIR}/sys_repos/fmt/include
 # tclap: header-only, devel/tclap12
 	@${MKDIR} ${WRKDIR}/sys_repos/tclap
 	@echo "" > ${WRKDIR}/sys_repos/tclap/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_tclap.BUILD.bazel ${WRKDIR}/sys_repos/tclap/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include ${WRKDIR}/sys_repos/tclap/include
 # nlohmann-json: header-only, devel/nlohmann-json
 	@${MKDIR} ${WRKDIR}/sys_repos/nlohmann-json
 	@echo "" > ${WRKDIR}/sys_repos/nlohmann-json/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_nlohmann-json.BUILD.bazel \
 		${WRKDIR}/sys_repos/nlohmann-json/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include ${WRKDIR}/sys_repos/nlohmann-json/include
 # spdlog: header-only from Bazel's perspective, devel/spdlog
 	@${MKDIR} ${WRKDIR}/sys_repos/spdlog
 	@echo "" > ${WRKDIR}/sys_repos/spdlog/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_spdlog.BUILD.bazel ${WRKDIR}/sys_repos/spdlog/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include ${WRKDIR}/sys_repos/spdlog/include
 # xxhash: static lib, devel/xxhash
 	@${MKDIR} ${WRKDIR}/sys_repos/xxhash
 	@echo "" > ${WRKDIR}/sys_repos/xxhash/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_xxhash.BUILD.bazel ${WRKDIR}/sys_repos/xxhash/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/xxhash.h ${WRKDIR}/sys_repos/xxhash/xxhash.h
 	${LN} -sf ${LOCALBASE}/include/xxh3.h ${WRKDIR}/sys_repos/xxhash/xxh3.h
 	${LN} -sf ${LOCALBASE}/lib/libxxhash.so ${WRKDIR}/sys_repos/xxhash/libxxhash.so
 # c-ares: shared lib, dns/c-ares
 	@${MKDIR} ${WRKDIR}/sys_repos/c-ares
 	@echo "" > ${WRKDIR}/sys_repos/c-ares/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_c-ares.BUILD.bazel ${WRKDIR}/sys_repos/c-ares/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/ares.h ${WRKDIR}/sys_repos/c-ares/ares.h
 	${LN} -sf ${LOCALBASE}/include/ares_build.h ${WRKDIR}/sys_repos/c-ares/ares_build.h
 	${LN} -sf ${LOCALBASE}/include/ares_dns.h ${WRKDIR}/sys_repos/c-ares/ares_dns.h
 	${LN} -sf ${LOCALBASE}/include/ares_dns_record.h ${WRKDIR}/sys_repos/c-ares/ares_dns_record.h
 	${LN} -sf ${LOCALBASE}/include/ares_nameser.h ${WRKDIR}/sys_repos/c-ares/ares_nameser.h
 	${LN} -sf ${LOCALBASE}/include/ares_version.h ${WRKDIR}/sys_repos/c-ares/ares_version.h
 	${LN} -sf ${LOCALBASE}/lib/libcares.so ${WRKDIR}/sys_repos/c-ares/libcares.so
 # yaml-cpp: shared lib, devel/yaml-cpp
 	@${MKDIR} ${WRKDIR}/sys_repos/yaml-cpp
 	@echo "" > ${WRKDIR}/sys_repos/yaml-cpp/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_yaml-cpp.BUILD.bazel ${WRKDIR}/sys_repos/yaml-cpp/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/yaml-cpp ${WRKDIR}/sys_repos/yaml-cpp/yaml-cpp
 	${LN} -sf ${LOCALBASE}/lib/libyaml-cpp.so ${WRKDIR}/sys_repos/yaml-cpp/libyaml-cpp.so
 # re2: shared lib, devel/re2
 	@${MKDIR} ${WRKDIR}/sys_repos/re2
 	@echo "" > ${WRKDIR}/sys_repos/re2/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_re2.BUILD.bazel ${WRKDIR}/sys_repos/re2/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/re2 ${WRKDIR}/sys_repos/re2/re2
 	${LN} -sf ${LOCALBASE}/lib/libre2.so ${WRKDIR}/sys_repos/re2/libre2.so
 # zstd: static lib, archivers/zstd
 	@${MKDIR} ${WRKDIR}/sys_repos/zstd
 	@echo "" > ${WRKDIR}/sys_repos/zstd/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_zstd.BUILD.bazel ${WRKDIR}/sys_repos/zstd/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/zstd.h ${WRKDIR}/sys_repos/zstd/zstd.h
 	${LN} -sf ${LOCALBASE}/include/zstd_errors.h ${WRKDIR}/sys_repos/zstd/zstd_errors.h
 	${LN} -sf ${LOCALBASE}/include/zdict.h ${WRKDIR}/sys_repos/zstd/zdict.h
 	${LN} -sf ${LOCALBASE}/lib/libzstd.so ${WRKDIR}/sys_repos/zstd/libzstd.so
 # brotli: shared libs, archivers/brotli
 	@${MKDIR} ${WRKDIR}/sys_repos/brotli
 	@echo "" > ${WRKDIR}/sys_repos/brotli/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_brotli.BUILD.bazel ${WRKDIR}/sys_repos/brotli/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/brotli ${WRKDIR}/sys_repos/brotli/brotli
 	${LN} -sf ${LOCALBASE}/lib/libbrotlicommon.so ${WRKDIR}/sys_repos/brotli/libbrotlicommon.so
 	${LN} -sf ${LOCALBASE}/lib/libbrotlidec.so ${WRKDIR}/sys_repos/brotli/libbrotlidec.so
 	${LN} -sf ${LOCALBASE}/lib/libbrotlienc.so ${WRKDIR}/sys_repos/brotli/libbrotlienc.so
 # flatbuffers: headers only, devel/flatbuffers (only header-only APIs are used)
 	@${MKDIR} ${WRKDIR}/sys_repos/flatbuffers
 	@echo "" > ${WRKDIR}/sys_repos/flatbuffers/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_flatbuffers.BUILD.bazel \
 		${WRKDIR}/sys_repos/flatbuffers/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/flatbuffers ${WRKDIR}/sys_repos/flatbuffers/flatbuffers
 # zlib: static lib from FreeBSD base system (/usr/lib/libz.a)
 	@${MKDIR} ${WRKDIR}/sys_repos/zlib/zlib/include
 	@echo "" > ${WRKDIR}/sys_repos/zlib/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_zlib.BUILD.bazel ${WRKDIR}/sys_repos/zlib/BUILD.bazel
 	${LN} -sf ${ZLIBBASE}/include/zlib.h ${WRKDIR}/sys_repos/zlib/zlib/include/zlib.h
 	${LN} -sf ${ZLIBBASE}/include/zconf.h ${WRKDIR}/sys_repos/zlib/zlib/include/zconf.h
 	${LN} -sf ${ZLIBBASE}/lib/libz.so ${WRKDIR}/sys_repos/zlib/libz.so
 # nghttp2: shared lib, www/nghttp2
 	@${MKDIR} ${WRKDIR}/sys_repos/nghttp2/include/nghttp2
 	@echo "" > ${WRKDIR}/sys_repos/nghttp2/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_nghttp2.BUILD.bazel ${WRKDIR}/sys_repos/nghttp2/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/nghttp2/nghttp2.h \
 		${WRKDIR}/sys_repos/nghttp2/include/nghttp2/nghttp2.h
 	${LN} -sf ${LOCALBASE}/include/nghttp2/nghttp2ver.h \
 		${WRKDIR}/sys_repos/nghttp2/include/nghttp2/nghttp2ver.h
 	${LN} -sf ${LOCALBASE}/lib/libnghttp2.so ${WRKDIR}/sys_repos/nghttp2/libnghttp2.so
 # libmaxminddb: shared lib, net/libmaxminddb
 	@${MKDIR} ${WRKDIR}/sys_repos/libmaxminddb/include
 	@echo "" > ${WRKDIR}/sys_repos/libmaxminddb/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_libmaxminddb.BUILD.bazel ${WRKDIR}/sys_repos/libmaxminddb/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/maxminddb.h \
 		${WRKDIR}/sys_repos/libmaxminddb/include/maxminddb.h
 	${LN} -sf ${LOCALBASE}/include/maxminddb_config.h \
 		${WRKDIR}/sys_repos/libmaxminddb/include/maxminddb_config.h
 	${LN} -sf ${LOCALBASE}/lib/libmaxminddb.so ${WRKDIR}/sys_repos/libmaxminddb/libmaxminddb.so
 # hyperscan: override always so Bazel never fetches the source archive.
 # On amd64: real system library from devel/hyperscan (exact version match 5.4.2).
 # On other arches: empty stub (hyperscan targets are linux/freebsd_x86_64-only).
 	@${MKDIR} ${WRKDIR}/sys_repos/hyperscan/include
 	@echo "" > ${WRKDIR}/sys_repos/hyperscan/WORKSPACE
 .if ${ARCH} == amd64
 	${CP} ${FILESDIR}/sys_repos_hyperscan.BUILD.bazel \
 		${WRKDIR}/sys_repos/hyperscan/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/hs ${WRKDIR}/sys_repos/hyperscan/include/hs
 	${LN} -sf ${LOCALBASE}/lib/libhs.a ${WRKDIR}/sys_repos/hyperscan/libhs.a
 .else
 	@echo "" > ${WRKDIR}/sys_repos/hyperscan/BUILD.bazel
 .endif
 # vectorscan: override always so Bazel never fetches the source archive.
 # On aarch64: real system library from devel/vectorscan.
 # On other arches: empty stub (vectorscan targets are linux/freebsd_aarch64-only).
 	@${MKDIR} ${WRKDIR}/sys_repos/vectorscan/include
 	@echo "" > ${WRKDIR}/sys_repos/vectorscan/WORKSPACE
 .if ${ARCH} == aarch64
 	${CP} ${FILESDIR}/sys_repos_vectorscan.BUILD.bazel \
 		${WRKDIR}/sys_repos/vectorscan/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/hs ${WRKDIR}/sys_repos/vectorscan/include/hs
 	${LN} -sf ${LOCALBASE}/lib/libhs.a ${WRKDIR}/sys_repos/vectorscan/libhs.a
 .else
 	@echo "" > ${WRKDIR}/sys_repos/vectorscan/BUILD.bazel
 .endif
 # build_bazel_rules_apple stub: grpc_build_system.bzl loads ios.bzl/ios_test_runner.bzl
 # unconditionally; we provide no-op stubs since Apple targets are not built on FreeBSD
 	@${MKDIR} ${WRKDIR}/sys_repos/apple_stub/apple/testing/default_runner
 	@echo 'workspace(name = "build_bazel_rules_apple")' > \
 		${WRKDIR}/sys_repos/apple_stub/WORKSPACE
 	@echo '# Apple stub' > ${WRKDIR}/sys_repos/apple_stub/BUILD
 	@echo '# Apple stub' > ${WRKDIR}/sys_repos/apple_stub/apple/BUILD
 	@echo '# Apple stub' > ${WRKDIR}/sys_repos/apple_stub/apple/testing/BUILD
 	@echo '# Apple stub' > \
 		${WRKDIR}/sys_repos/apple_stub/apple/testing/default_runner/BUILD
 	@echo 'def ios_unit_test(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/apple_stub/apple/ios.bzl
 	@echo 'def ios_test_runner(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/apple_stub/apple/testing/default_runner/ios_test_runner.bzl
 	@echo 'def apple_rules_dependencies(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/apple_stub/apple/repositories.bzl
 # base_pip3 stub: envoy's v8.patch rewrites @v8_python_deps -> @base_pip3 in v8/BUILD.bazel.
 # v8/BUILD.bazel loads @base_pip3//:requirements.bzl at package load time (blocking @v8//
 # evaluation even for C++ targets). Provide a stub so the load succeeds. The requirement()
 # function returns a stub py_library; jinja2 is the only package referenced.
 	@${MKDIR} ${WRKDIR}/sys_repos/base_pip3
 	@echo 'workspace(name = "base_pip3")' > ${WRKDIR}/sys_repos/base_pip3/WORKSPACE
 	@echo 'py_library(name = "jinja2", srcs = [], visibility = ["//visibility:public"])' > \
 		${WRKDIR}/sys_repos/base_pip3/BUILD.bazel
 	@echo 'def install_deps(): pass' > \
 		${WRKDIR}/sys_repos/base_pip3/requirements.bzl
 	@echo 'def requirement(name): return "@base_pip3//:" + name' >> \
 		${WRKDIR}/sys_repos/base_pip3/requirements.bzl
 # emsdk stub: dependency_imports.bzl loads emscripten_deps.bzl/toolchains.bzl;
 # repositories_extra.bzl loads deps.bzl. Provide no-op stubs — WASM not built on FreeBSD.
 	@${MKDIR} ${WRKDIR}/sys_repos/emsdk
 	@echo "" > ${WRKDIR}/sys_repos/emsdk/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/emsdk/BUILD.bazel
 	@echo 'def emscripten_deps(**kwargs): pass' > ${WRKDIR}/sys_repos/emsdk/emscripten_deps.bzl
 	@echo 'def register_emscripten_toolchains(**kwargs): pass' > ${WRKDIR}/sys_repos/emsdk/toolchains.bzl
 	@echo 'def deps(**kwargs): pass' > ${WRKDIR}/sys_repos/emsdk/deps.bzl
 # proxy_wasm_rust_sdk stub: dependency_imports.bzl loads bazel/dependencies.bzl.
 	@${MKDIR} ${WRKDIR}/sys_repos/proxy_wasm_rust_sdk/bazel
 	@echo "" > ${WRKDIR}/sys_repos/proxy_wasm_rust_sdk/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/proxy_wasm_rust_sdk/BUILD.bazel
 	@echo "" > ${WRKDIR}/sys_repos/proxy_wasm_rust_sdk/bazel/BUILD.bazel
 	@echo 'def proxy_wasm_rust_sdk_dependencies(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/proxy_wasm_rust_sdk/bazel/dependencies.bzl
 # rules_fuzzing stub: test_only; shares v0.6.0.tar.gz basename with cpp2sky causing
 # a distdir collision (last-write-wins overwrites the symlink).  Stub it out so Bazel
 # never fetches it and cpp2sky retains the v0.6.0.tar.gz distdir entry.
 	@${MKDIR} ${WRKDIR}/sys_repos/rules_fuzzing/fuzzing
 	@echo 'workspace(name = "rules_fuzzing")' > \
 		${WRKDIR}/sys_repos/rules_fuzzing/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/rules_fuzzing/BUILD
 	@echo "" > ${WRKDIR}/sys_repos/rules_fuzzing/fuzzing/BUILD
 	@echo 'def rules_fuzzing_dependencies(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/rules_fuzzing/fuzzing/repositories.bzl
 	@echo 'def fuzzing_decoration(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/rules_fuzzing/fuzzing/cc_defs.bzl
 # rules_buf stub: dependency_imports.bzl loads @rules_buf//buf:repositories.bzl at module
 # level; buf binary is provided by the system (devel/buf) so no toolchain download needed.
 	@${MKDIR} ${WRKDIR}/sys_repos/rules_buf/buf
 	@echo 'workspace(name = "rules_buf")' > ${WRKDIR}/sys_repos/rules_buf/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/rules_buf/BUILD
 	@echo "" > ${WRKDIR}/sys_repos/rules_buf/buf/BUILD
 	@echo 'def rules_buf_toolchains(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/rules_buf/buf/repositories.bzl
 # rules_proto stub: io_bazel_rules_go/proto/compiler.bzl loads
 # @rules_proto//proto:proto_common.bzl at module level.  The real rules_proto 7.1.0
 # proto_common.bzl transitively loads @com_google_protobuf which may not be
 # initialised during early loading phase.  Provide a self-contained stub that
 # satisfies all load()s without any external deps.
 	@${MKDIR} ${WRKDIR}/sys_repos/rules_proto/proto/private/rules
 	@echo 'workspace(name = "rules_proto")' > ${WRKDIR}/sys_repos/rules_proto/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/rules_proto/BUILD
 	@echo "" > ${WRKDIR}/sys_repos/rules_proto/proto/BUILD
 	@echo "" > ${WRKDIR}/sys_repos/rules_proto/proto/private/BUILD
 	@echo "" > ${WRKDIR}/sys_repos/rules_proto/proto/private/rules/BUILD
 	@echo 'def _use_toolchain(toolchain_type): return []' > \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo 'def _find_toolchain(ctx, legacy_attr, toolchain_type): return None' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo 'def _if_legacy_toolchain(legacy_attr_dict): return legacy_attr_dict' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo 'toolchains = struct(' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo '    use_toolchain = _use_toolchain,' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo '    find_toolchain = _find_toolchain,' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo '    if_legacy_toolchain = _if_legacy_toolchain,' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo ')' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/proto_common.bzl
 	@echo 'ProtoInfo = provider("ProtoInfo", fields = ["check_deps_sources", "direct_descriptor_set", "direct_sources", "proto_source_root", "transitive_descriptor_sets", "transitive_imports", "transitive_proto_path", "transitive_sources"])' > \
 		${WRKDIR}/sys_repos/rules_proto/proto/defs.bzl
 	@echo 'def proto_library(**kwargs): native.proto_library(**kwargs)' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/defs.bzl
 	@echo 'def proto_lang_toolchain(**kwargs): native.proto_lang_toolchain(**kwargs)' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/defs.bzl
 	@echo 'def proto_toolchain(**kwargs): pass' >> \
 		${WRKDIR}/sys_repos/rules_proto/proto/defs.bzl
 	@echo 'def proto_descriptor_set(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/rules_proto/proto/private/rules/proto_descriptor_set.bzl
 # io_bazel_rules_go: extract rules_go 0.59.0 which already fixed the GOEXPERIMENT
 # coverageredesign issue and has correct BUILD.bazel files for org_golang_google_protobuf v1.36.x.
 	@${MKDIR} ${WRKDIR}/sys_repos/io_bazel_rules_go
 	@${UNZIP_CMD} -q ${DISTDIR}/${DIST_SUBDIR}/rules_go-v0.59.0.zip \
 		-d ${WRKDIR}/sys_repos/io_bazel_rules_go
 # opentelemetry_proto: the data-plane-api's api_dependencies() registers opentelemetry_proto
 # with build content using api_cc_py_proto_library(name="trace",...) which creates "trace" and
 # "trace_cc_proto" targets.  The envoy source's opentelemetry tracer BUILD directly references
 # "@opentelemetry_proto//:trace_proto_cc" (new naming convention).  Override with a local
 # directory that provides both old-style aliases and new-style cc_proto_library targets.
 # Uses the v1.9.0 archive (from GH_TUPLE) which has all required .proto source files.
 	@${MKDIR} ${WRKDIR}/sys_repos/opentelemetry_proto
 	@${TAR} -xzf ${DISTDIR}/${DIST_SUBDIR}/open-telemetry-opentelemetry-proto-v1.9.0_GH0.tar.gz \
 		--strip-components=1 \
 		-C ${WRKDIR}/sys_repos/opentelemetry_proto
 	@echo 'workspace(name = "opentelemetry_proto")' > \
 		${WRKDIR}/sys_repos/opentelemetry_proto/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_opentelemetry_proto.BUILD.bazel \
 		${WRKDIR}/sys_repos/opentelemetry_proto/BUILD.bazel
 # ninja_build_src: rules_foreign_cc_dependencies() registers this via maybe(http_archive)
 # with sha256 matching the GitHub releases archive (v1.11.1.tar.gz).  The GH_TUPLE download
 # is from codeload.github.com which has a different sha256, so the distdir basename lookup
 # fails.  Override with the GH_TUPLE archive so Bazel skips the fetch entirely.
 # rules_foreign_cc builds ninja from source for its foreign_cc toolchain; all_srcs must exist.
 	@${MKDIR} ${WRKDIR}/sys_repos/ninja_build_src
 	@${TAR} -xzf ${DISTDIR}/${DIST_SUBDIR}/ninja-build-ninja-v1.11.1_GH0.tar.gz \
 		--strip-components=1 \
 		-C ${WRKDIR}/sys_repos/ninja_build_src
 	@echo 'workspace(name = "ninja_build_src")' > \
 		${WRKDIR}/sys_repos/ninja_build_src/WORKSPACE
 	@echo 'filegroup(name = "all_srcs", srcs = glob(["**"]), visibility = ["//visibility:public"])' > \
 		${WRKDIR}/sys_repos/ninja_build_src/BUILD.bazel
 # empty_stub: shared stub for Linux/Intel/WASM-specific repos not used on FreeBSD.
 	@${MKDIR} ${WRKDIR}/sys_repos/empty_stub
 	@echo "" > ${WRKDIR}/sys_repos/empty_stub/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/empty_stub/BUILD.bazel
 # libinotify: inotify support for FreeBSD < 1500051; stub (inotify in base) on newer systems.
 .if defined(LIBINOTIFY_IS_REAL)
 	@${MKDIR} ${WRKDIR}/sys_repos/libinotify/sys
 	@echo "" > ${WRKDIR}/sys_repos/libinotify/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_libinotify.BUILD.bazel \
 		${WRKDIR}/sys_repos/libinotify/BUILD.bazel
 	${LN} -sf ${LOCALBASE}/include/sys/inotify.h \
 		${WRKDIR}/sys_repos/libinotify/sys/inotify.h
 	${LN} -sf ${LOCALBASE}/lib/libinotify.so \
 		${WRKDIR}/sys_repos/libinotify/libinotify.so
 .else
 	@${MKDIR} ${WRKDIR}/sys_repos/libinotify
 	@echo "" > ${WRKDIR}/sys_repos/libinotify/WORKSPACE
 	@printf 'cc_library(name = "libinotify", visibility = ["//visibility:public"])\n' \
 		> ${WRKDIR}/sys_repos/libinotify/BUILD.bazel
 .endif
 # python3_11 stub: envoy_toolshed/packages.bzl loads @python3_11//:defs.bzl at module level.
 # The toolshed targets Python 3.11 but envoy registers python3_12; stub out 3.11 so the
 # module-level load() succeeds. interpreter is only used by pip3 which is also stubbed.
 	@${MKDIR} ${WRKDIR}/sys_repos/python3_11
 	@echo "" > ${WRKDIR}/sys_repos/python3_11/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/python3_11/BUILD.bazel
 	@echo 'interpreter = "@python3_11//:python"' > ${WRKDIR}/sys_repos/python3_11/defs.bzl
 # pip3_stub: stubs for pip repos created by pip_parse() in envoy_python_dependencies().
 # pip3 = load_packages() result; dev_pip3/fuzzing_pip3 = development tooling; all unused
 # for building the static envoy binary. Use same no-op pattern as base_pip3.
 	@${MKDIR} ${WRKDIR}/sys_repos/pip3_stub
 	@echo "" > ${WRKDIR}/sys_repos/pip3_stub/WORKSPACE
 	@echo 'py_library(name = "jinja2", srcs = [], visibility = ["//visibility:public"])' > \
 		${WRKDIR}/sys_repos/pip3_stub/BUILD.bazel
 	@echo 'def install_deps(): pass' > ${WRKDIR}/sys_repos/pip3_stub/requirements.bzl
 	@echo 'def requirement(name): return "@pip3_stub//:" + name' >> \
 		${WRKDIR}/sys_repos/pip3_stub/requirements.bzl
 # com_google_absl: the pomerium SSH wire extension enables -Wimplicit-int-conversion which triggers
 # a truncation warning in absl's civil_time_detail.h on FreeBSD where int_fast8_t=int but
 # int_least8_t=signed char.  Override with a patched copy that adds static_casts.
 	@${LN} -sf ${WRKDIR}/abseil-cpp-20250814.1 ${WRKDIR}/sys_repos/com_google_absl
 	@echo 'workspace(name = "com_google_absl")' > \
 		${WRKDIR}/sys_repos/com_google_absl/WORKSPACE
 	@${REINPLACE_CMD} -e \
 		's|: y(year), m(month), d(day), hh(hour), mm(minute), ss(second) {}|: y(year), m(static_cast<std::int_least8_t>(month)), d(static_cast<std::int_least8_t>(day)), hh(static_cast<std::int_least8_t>(hour)), mm(static_cast<std::int_least8_t>(minute)), ss(static_cast<std::int_least8_t>(second)) {}|' \
 		${WRKDIR}/sys_repos/com_google_absl/absl/time/internal/cctz/include/cctz/civil_time_detail.h
 # com_google_googleapis: data-plane-api's api_dependencies() registers this via external_http_archive
 # with commit 114a745b (sha256 9b4e0d0a). The GH_TUPLE archive fd52b5754b is a compatible newer
 # version. Use --override_repository to bypass the distdir fetch entirely.
 	@${MKDIR} ${WRKDIR}/sys_repos/com_google_googleapis
 	@${TAR} -xzf ${DISTDIR}/${DIST_SUBDIR}/googleapis-googleapis-fd52b5754b2b268bc3a22a10f29844f206abb327_GH0.tar.gz \
 		--strip-components=1 \
 		-C ${WRKDIR}/sys_repos/com_google_googleapis
 	@echo 'workspace(name = "com_google_googleapis")' > \
 		${WRKDIR}/sys_repos/com_google_googleapis/WORKSPACE
 # org_golang_google_protobuf: the patched nested Envoy repo still refers to an older module
 # version, but the vendored v1.36.10 module zip contains the required source tree and is
 # sufficient for the packages this build imports. Override it locally from that module zip.
 	@${MKDIR} ${WRKDIR}/sys_repos/org_golang_google_protobuf
 	@${UNZIP_CMD} -q ${DISTDIR}/${DIST_SUBDIR}/v1.36.10.zip \
 		-d ${WRKDIR}/sys_repos/org_golang_google_protobuf
 	@cd ${WRKDIR}/sys_repos/org_golang_google_protobuf && \
 		for path in google.golang.org/protobuf@v1.36.10/*; do \
 			${MV} "$$path" .; \
 		done
 	@${RM} -r ${WRKDIR}/sys_repos/org_golang_google_protobuf/google.golang.org
 	@echo 'workspace(name = "org_golang_google_protobuf")' > \
 		${WRKDIR}/sys_repos/org_golang_google_protobuf/WORKSPACE
 	@bsdtar -xOf ${DISTDIR}/${DIST_SUBDIR}/rules_go-v0.59.0.zip \
 		third_party/org_golang_google_protobuf-gazelle.patch \
 		> ${WRKDIR}/org_golang_google_protobuf-gazelle.patch
 	@cd ${WRKDIR}/sys_repos/org_golang_google_protobuf && \
 		${PATCH} -p1 < ${WRKDIR}/org_golang_google_protobuf-gazelle.patch
 # v1.36.10 replaced version-split *_go1XX.go files with unified files and removed weak.go.
 # The gazelle patch references stale filenames; replace or delete as appropriate.
 	@${FIND} ${WRKDIR}/sys_repos/org_golang_google_protobuf -name "BUILD.bazel" \
 		-exec ${SED} -i '' \
 		-e 's|"strings_unsafe_go120\.go"|"strings_unsafe.go"|' \
 		-e 's|"value_unsafe_go120\.go"|"value_unsafe.go"|' \
 		-e '/"weak\.go"/d' \
 		-e '/_go1[0-9][0-9]*\.go/d' \
 		{} +
 # presence.go was added after v1.36.3 (when rules_go 0.59.0 was cut); add it to filedesc srcs.
 	@${REINPLACE_CMD} -e 's|"placeholder\.go",|"placeholder.go",\n        "presence.go",|' \
 		${WRKDIR}/sys_repos/org_golang_google_protobuf/internal/filedesc/BUILD.bazel
 # org_golang_x_text: patched nested Envoy still refers to v0.3.3, but the port vendors
 # v0.21.0.  Override locally with the specific packages needed by afero's build directives.
 	@${MKDIR} ${WRKDIR}/sys_repos/org_golang_x_text
 	@${UNZIP_CMD} -q ${DISTDIR}/${DIST_SUBDIR}/v0.21.0.zip \
 		-d ${WRKDIR}/sys_repos/org_golang_x_text
 	@cd ${WRKDIR}/sys_repos/org_golang_x_text && \
 		for path in golang.org/x/text@v0.21.0/*; do \
 			${MV} "$$path" .; \
 		done
 	@${RM} -r ${WRKDIR}/sys_repos/org_golang_x_text/golang.org
 	@echo 'workspace(name = "org_golang_x_text")' > \
 		${WRKDIR}/sys_repos/org_golang_x_text/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_org_golang_x_text_transform.BUILD.bazel \
 		${WRKDIR}/sys_repos/org_golang_x_text/transform/BUILD.bazel
 	${CP} ${FILESDIR}/sys_repos_org_golang_x_text_runes.BUILD.bazel \
 		${WRKDIR}/sys_repos/org_golang_x_text/runes/BUILD.bazel
 	${CP} ${FILESDIR}/sys_repos_org_golang_x_text_unicode_norm.BUILD.bazel \
 		${WRKDIR}/sys_repos/org_golang_x_text/unicode/norm/BUILD.bazel
 # prometheus_metrics_model: embedded envoy_api's api_dependencies() registers this with
 # custom build_file_content. Override it with a local extracted tree and equivalent
 # BUILD file so Bazel does not try to fetch the repository.
 	@${MKDIR} ${WRKDIR}/sys_repos/prometheus_metrics_model
 	@${TAR} -xzf ${DISTDIR}/${DIST_SUBDIR}/prometheus-client_model-v0.6.2_GH0.tar.gz \
 		--strip-components=1 \
 		-C ${WRKDIR}/sys_repos/prometheus_metrics_model
 	@echo 'workspace(name = "prometheus_metrics_model")' > \
 		${WRKDIR}/sys_repos/prometheus_metrics_model/WORKSPACE
 	${CP} ${FILESDIR}/sys_repos_prometheus_metrics_model.BUILD.bazel \
 		${WRKDIR}/sys_repos/prometheus_metrics_model/BUILD.bazel
 # envoy_toolshed stub: the real toolshed v0.3.3 has coverage/grcov/ and compile/ packages
 # but Bazel 7 fails to recognise them as sub-packages (no-package error at load time).
 # Also, packages.bzl in v0.3.3 loads @python3_11 at module level, creating a cycle because
 # envoy registers python3_12, not python3_11.  Provide a minimal stub with no-op versions
 # of all symbols loaded by the envoy source.
 	@${MKDIR} ${WRKDIR}/sys_repos/envoy_toolshed/compile
 	@${MKDIR} ${WRKDIR}/sys_repos/envoy_toolshed/coverage/grcov
 	@${MKDIR} ${WRKDIR}/sys_repos/envoy_toolshed/dependency
 	@echo 'workspace(name = "envoy_toolshed")' > \
 		${WRKDIR}/sys_repos/envoy_toolshed/WORKSPACE
 	@echo "" > ${WRKDIR}/sys_repos/envoy_toolshed/BUILD
 	@echo 'def json_data(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/envoy_toolshed/macros.bzl
 	@echo 'def load_packages(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/envoy_toolshed/packages.bzl
 	@echo "" > ${WRKDIR}/sys_repos/envoy_toolshed/compile/BUILD
 	@echo 'def setup_sanitizer_libs(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/envoy_toolshed/compile/sanitizer_libs.bzl
 	@echo "" > ${WRKDIR}/sys_repos/envoy_toolshed/coverage/BUILD
 	@echo "" > ${WRKDIR}/sys_repos/envoy_toolshed/coverage/grcov/BUILD
 	@echo 'def grcov_repository(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/envoy_toolshed/coverage/grcov/grcov_repository.bzl
 	@echo "" > ${WRKDIR}/sys_repos/envoy_toolshed/dependency/BUILD
 	@echo 'def updater(**kwargs): pass' > \
 		${WRKDIR}/sys_repos/envoy_toolshed/dependency/macros.bzl
 	@${ECHO_MSG} "===> Setting up Go module proxy for offline go_repository builds"
 	@${MKDIR} ${WRKDIR}/goproxy
 # proxy.golang.org-format zips: extract go.mod, create .info and list, symlink .zip
 	@for entry in \
 	    "google.golang.org/grpc v1.68.0 v1.68.0.zip" \
 	    "golang.org/x/net v0.34.0 v0.34.0.zip" \
 	    "golang.org/x/text v0.21.0 v0.21.0.zip" \
 	    "google.golang.org/protobuf v1.36.10 v1.36.10.zip" \
 	    "github.com/cncf/xds/go v0.0.0-20251110193048-8bfbf64dc13e v0.0.0-20251110193048-8bfbf64dc13e.zip" \
 	    "cel.dev/expr v0.25.1 v0.25.1.zip" \
 	    "github.com/spf13/afero v1.10.0 v1.10.0.zip" \
 	    "github.com/lyft/protoc-gen-star/v2 v2.0.4-0.20230330145011-496ad1ac90a4 v2.0.4-0.20230330145011-496ad1ac90a4.zip" \
 	    "github.com/iancoleman/strcase v0.3.0 v0.3.0.zip" \
 	    "github.com/planetscale/vtprotobuf v0.6.1-0.20240409071808-615f978279ca v0.6.1-0.20240409071808-615f978279ca.zip" \
 	    "github.com/golang/protobuf v1.5.0 v1.5.0.zip" \
 	    "github.com/alecthomas/jsonschema v0.0.0-20210918223802-a1d3f4b43d7b v0.0.0-20210918223802-a1d3f4b43d7b.zip" \
 	    "github.com/davecgh/go-spew v1.1.1 v1.1.1.zip" \
 	    "github.com/fatih/camelcase v1.0.0 v1.0.0.zip" \
 	    "github.com/google/go-cmp v0.5.5 v0.5.5.zip" \
 	    "github.com/iancoleman/orderedmap v0.2.0 v0.2.0.zip" \
 	    "github.com/sirupsen/logrus v1.4.2 v1.4.2.zip" \
 	    "github.com/stretchr/objx v0.1.1 v0.1.1.zip" \
 	    "github.com/stretchr/testify v1.6.1 v1.6.1.zip" \
 	    "github.com/xeipuuv/gojsonpointer v0.0.0-20190809123943-df4f5c81cb3b v0.0.0-20190809123943-df4f5c81cb3b.zip" \
 	    "github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 v0.0.0-20180127040603-bd5ef7bd5415.zip" \
 	    "github.com/xeipuuv/gojsonschema v1.2.0 v1.2.0.zip" \
 	    "gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 v1.0.0-20180628173108-788fd7840127.zip" \
 	    "gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c v3.0.0-20200313102051-9f266ea9e77c.zip" \
 	    "golang.org/x/lint v0.0.0-20210508222113-6edffad5e616 v0.0.0-20210508222113-6edffad5e616.zip" \
 	    "golang.org/x/mod v0.9.0 v0.9.0.zip" \
 	    "golang.org/x/sys v0.7.0 v0.7.0.zip" \
 	    "golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 v0.0.0-20191204190536-9bdfabe68543.zip" \
 	; do \
 	    set -- $$entry; modpath=$$1; ver=$$2; zipf=$$3; \
 	    d="${WRKDIR}/goproxy/$${modpath}/@v"; \
 	    ${MKDIR} "$${d}"; \
 	    if ! ${UNZIP_CMD} -p "${DISTDIR}/${DIST_SUBDIR}/$${zipf}" "$${modpath}@$${ver}/go.mod" > "$${d}/$${ver}.mod"; then \
 	        ${PRINTF} 'module %s\n' "$${modpath}" > "$${d}/$${ver}.mod"; \
 	    fi; \
 	    ${PRINTF} '{"Version":"%s","Time":"2020-01-01T00:00:00Z"}\n' "$${ver}" > "$${d}/$${ver}.info"; \
 	    ${PRINTF} '%s\n' "$${ver}" > "$${d}/list"; \
 	    ${LN} -sf "${DISTDIR}/${DIST_SUBDIR}/$${zipf}" "$${d}/$${ver}.zip"; \
 	done
 # genproto/googleapis/{api,rpc}: create proxy-format zips from GitHub archive
 # The GitHub archive contains the same git tree as the Go module proxy serves;
 # nested module subdirectories must be excluded per the Go module zip spec.
 	@GENVER="v0.0.0-20251029180050-ab9386a59fda"; \
 	GENSRCPFX="go-genproto-ab9386a59fda5527e1fb6eb1f7d4b052283f7934"; \
 	tmpdir=$$(mktemp -d); \
 	${UNZIP_CMD} -q "${DISTDIR}/${DIST_SUBDIR}/ab9386a59fda.zip" -d "$${tmpdir}"; \
 	for submod in api rpc; do \
 	    modpath="google.golang.org/genproto/googleapis/$${submod}"; \
 	    srcdir="$${tmpdir}/$${GENSRCPFX}/googleapis/$${submod}"; \
 	    dstprefix="$${modpath}@$${GENVER}"; \
 	    dstdir="$${tmpdir}/$${dstprefix}"; \
 	    ${MKDIR} "$${dstdir}"; \
 	    ( cd "$${srcdir}" && find . -type f ) | sort | while IFS= read -r f; do \
 	        rel="$${f#./}"; \
 	        case "$${submod}:$${rel}" in \
 	            api:apikeys/*|api:servicecontrol/*|api:servicemanagement/*|api:serviceusage/*) \
 	                continue ;; \
 	        esac; \
 	        ${MKDIR} "$$(dirname "$${dstdir}/$${rel}")"; \
 	        cp "$${srcdir}/$${rel}" "$${dstdir}/$${rel}"; \
 	    done; \
 	    proxyd="${WRKDIR}/goproxy/$${modpath}/@v"; \
 	    ${MKDIR} "$${proxyd}"; \
 	    ( cd "$${tmpdir}" && find "$${dstprefix}" -type f | sort | zip -q "$${proxyd}/$${GENVER}.zip" -@ ); \
 	    cp "$${dstdir}/go.mod" "$${proxyd}/$${GENVER}.mod"; \
 		    ${PRINTF} '{"Version":"%s","Time":"2025-10-29T11:00:00Z"}\n' "$${GENVER}" > "$${proxyd}/$${GENVER}.info"; \
 		    ${PRINTF} '%s\n' "$${GENVER}" > "$${proxyd}/list"; \
 	done; \
 	rm -rf "$${tmpdir}"
 # protoc-gen-validate Go module: create proxy-format zip from GitHub tar.gz;
 # exclude the tests/ nested module subdirectory.
 	@PGV_VER="v1.3.0"; \
 	PGV_MOD="github.com/envoyproxy/protoc-gen-validate"; \
 	PGV_SRCPFX="protoc-gen-validate-1.3.0"; \
 	tmpdir=$$(mktemp -d); \
 	tar xzf "${DISTDIR}/${DIST_SUBDIR}/v1.3.0.tar.gz" -C "$${tmpdir}"; \
 	srcdir="$${tmpdir}/$${PGV_SRCPFX}"; \
 	dstprefix="$${PGV_MOD}@$${PGV_VER}"; \
 	dstdir="$${tmpdir}/$${dstprefix}"; \
 	${MKDIR} "$${dstdir}"; \
 	( cd "$${srcdir}" && find . -type f ) | sort | while IFS= read -r f; do \
 	    rel="$${f#./}"; \
 	    case "$${rel}" in tests/*) continue ;; esac; \
 	    ${MKDIR} "$$(dirname "$${dstdir}/$${rel}")"; \
 	    cp "$${srcdir}/$${rel}" "$${dstdir}/$${rel}"; \
 	done; \
 	proxyd="${WRKDIR}/goproxy/$${PGV_MOD}/@v"; \
 	${MKDIR} "$${proxyd}"; \
 	( cd "$${tmpdir}" && find "$${dstprefix}" -type f | sort | zip -q "$${proxyd}/$${PGV_VER}.zip" -@ ); \
 	cp "$${dstdir}/go.mod" "$${proxyd}/$${PGV_VER}.mod"; \
 		${PRINTF} '{"Version":"%s","Time":"2023-01-01T00:00:00Z"}\n' "$${PGV_VER}" > "$${proxyd}/$${PGV_VER}.info"; \
 		${PRINTF} '%s\n' "$${PGV_VER}" > "$${proxyd}/list"; \
 	rm -rf "$${tmpdir}"
 	@${ECHO_MSG} "===> Setting up Bazel distdir from distfiles"
 	@${MKDIR} ${WRKDIR}/bazel-distdir
 	@for f in ${DISTDIR}/${DIST_SUBDIR}/*; do \
 	    [ -f "$$f" ] || continue; \
 	    ${LN} -sf "$$f" ${WRKDIR}/bazel-distdir/$$(basename "$$f"); \
 	done
 # @envoy_api http_archive URL basename is <commit>.tar.gz; GH_TUPLE names it with a prefix.
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/envoyproxy-data-plane-api-${ENVOY_API_COMMIT}_GH0.tar.gz \
 	    ${WRKDIR}/bazel-distdir/${ENVOY_API_COMMIT}.tar.gz
 # Embedded envoy_api dependencies: link exact upstream basenames expected by bazel/repositories.bzl.
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/bazel-skylib-1.7.1.tar.gz \
 	    ${WRKDIR}/bazel-distdir/bazel-skylib-1.7.1.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/rules_jvm_external-6.1.tar.gz \
 	    ${WRKDIR}/bazel-distdir/rules_jvm_external-6.1.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/v1.0.4.zip \
 	    ${WRKDIR}/bazel-distdir/v1.0.4.zip
 # Embedded envoy_api dependency: com_google_googleapis is fetched as <commit>.tar.gz.
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/114a745b2841a044e98cdbb19358ed29fcf4a5f1.tar.gz \
 	    ${WRKDIR}/bazel-distdir/114a745b2841a044e98cdbb19358ed29fcf4a5f1.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/v0.4.1.tar.gz \
 	    ${WRKDIR}/bazel-distdir/v0.4.1.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/v0.6.1.tar.gz \
 	    ${WRKDIR}/bazel-distdir/v0.6.1.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/5.3.0-21.7.tar.gz \
 	    ${WRKDIR}/bazel-distdir/5.3.0-21.7.tar.gz
 # Embedded envoy_api dependency: com_github_openzipkin_zipkinapi is fetched as 1.0.0.tar.gz.
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/openzipkin-zipkin-api-1.0.0_GH0.tar.gz \
 	    ${WRKDIR}/bazel-distdir/1.0.0.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/buf-Linux-x86_64.tar.gz \
 	    ${WRKDIR}/bazel-distdir/buf-Linux-x86_64.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/7680e4998426e62b6896995ff73d4d91cc5fb13c.zip \
 	    ${WRKDIR}/bazel-distdir/7680e4998426e62b6896995ff73d4d91cc5fb13c.zip
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/v0.15.0.tar.gz \
 	    ${WRKDIR}/bazel-distdir/v0.15.0.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/rules_proto_grpc-4.6.0.tar.gz \
 	    ${WRKDIR}/bazel-distdir/rules_proto_grpc-4.6.0.tar.gz
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/bazel-v0.1.3.tar.gz \
 	    ${WRKDIR}/bazel-distdir/bazel-v0.1.3.tar.gz
 # Patched dep: com_github_google_tcmalloc bumped by patches/envoy/0002-bump-dependencies.patch.
 # The auto-detection loop reads the unpatched repository_locations.bzl and won't find the new
 # sha, so we create the symlink explicitly here.
 	${LN} -sf ${DISTDIR}/${DIST_SUBDIR}/google-tcmalloc-0c3faab546c22d67e11327c6c6c7c34c1707c5db_GH0.tar.gz \
 	    ${WRKDIR}/bazel-distdir/0c3faab546c22d67e11327c6c6c7c34c1707c5db.tar.gz
 	@for locations in ${WRKSRC}/bazel/repository_locations.bzl \
 	    ${WRKSRC}/api/bazel/repository_locations.bzl; do \
 	    [ -f "$$locations" ] || continue; \
 	    ${AWK} '\
 	        /^[A-Z0-9_]+ = "/ { \
 	            split($$0, parts, " = "); \
 	            split($$0, fields, "\""); \
 	            consts[parts[1]] = fields[2]; \
 	            next; \
 	        } \
 		        index($$0, "version = \"") { \
 		            split($$0, fields, "\""); \
 		            version = fields[2]; \
 		            next; \
 		        } \
 		        index($$0, "version = ") && index($$0, "\"") == 0 { \
 		            split($$0, parts, " = "); \
 		            symbol = parts[2]; \
 		            sub(/,.*/, "", symbol); \
 	            version = consts[symbol]; \
 	            next; \
 	        } \
 	        /sha256 = "/ { \
 	            split($$0, fields, "\""); \
 	            sha = fields[2]; \
 	            next; \
 	        } \
 	        /urls = \[/ { \
 	            if (sha != "") { \
 	                split($$0, fields, "\""); \
 	                url = fields[2]; \
 	                gsub(/\{version\}/, version, url); \
 	                sub(/^.*\//, "", url); \
 	                print sha " " url; \
 	                sha = ""; \
 	                version = ""; \
 	            } \
 	        }' "$$locations" | while read -r sha name; do \
 	            [ -n "$$sha" ] || continue; \
 	            src=$$(${AWK} -v sha="$$sha" '\
 	                $$1 == "SHA256" && index($$0, sha) { \
 	                    sub(/^SHA256 \(/, ""); \
 	                    sub(/\).*/, ""); \
 	                    print; \
 	                    exit; \
 	                }' ${.CURDIR}/distinfo); \
 	            [ -n "$$src" ] || continue; \
 	            ${LN} -sf ${DISTDIR}/$$src ${WRKDIR}/bazel-distdir/$$name; \
 	        done; \
 	done
 	@for spec in \
 	    "${DISTDIR}/${DIST_SUBDIR}/${ENVOY_SRC_COMMIT}.zip|envoy-${ENVOY_SRC_COMMIT}/bazel/repository_locations.bzl" \
 	    "${DISTDIR}/${DIST_SUBDIR}/envoyproxy-data-plane-api-${ENVOY_API_COMMIT}_GH0.tar.gz|data-plane-api-${ENVOY_API_COMMIT}/bazel/repository_locations.bzl"; do \
 	    archive=$${spec%%|*}; \
 	    member=$${spec#*|}; \
 	    [ -f "$$archive" ] || continue; \
 	    ${TAR} -xOf "$$archive" "$$member" 2>/dev/null | ${AWK} '\
 	        /^[A-Z0-9_]+ = "/ { \
 	            split($$0, parts, " = "); \
 	            split($$0, fields, "\""); \
 	            consts[parts[1]] = fields[2]; \
 	            next; \
 	        } \
 	        index($$0, "version = \"") { \
 	            split($$0, fields, "\""); \
 	            version = fields[2]; \
 	            next; \
 	        } \
 	        index($$0, "version = ") && index($$0, "\"") == 0 { \
 	            split($$0, parts, " = "); \
 	            symbol = parts[2]; \
 	            sub(/,.*/, "", symbol); \
 	            version = consts[symbol]; \
 	            next; \
 	        } \
 	        /sha256 = "/ { \
 	            split($$0, fields, "\""); \
 	            sha = fields[2]; \
 	            next; \
 	        } \
 	        /urls = \[/ { \
 	            if (sha != "") { \
 	                split($$0, fields, "\""); \
 	                url = fields[2]; \
 	                gsub(/\{version\}/, version, url); \
 	                sub(/^.*\//, "", url); \
 	                print sha " " url; \
 	                sha = ""; \
 	                version = ""; \
 	            } \
 	        }' | while read -r sha name; do \
 	            [ -n "$$sha" ] || continue; \
 	            src=$$(${AWK} -v sha="$$sha" '\
 	                $$1 == "SHA256" && index($$0, sha) { \
 	                    sub(/^SHA256 \(/, ""); \
 	                    sub(/\).*/, ""); \
 	                    print; \
 	                    exit; \
 	                }' ${.CURDIR}/distinfo); \
 	            [ -n "$$src" ] || continue; \
 	            ${LN} -sf ${DISTDIR}/$$src ${WRKDIR}/bazel-distdir/$$name; \
 	        done; \
 	done
 
 do-build:
 	cd ${WRKSRC} && ${SETENV} ${BAZEL_ENV} ${LOCALBASE}/bin/bazel \
 		${BAZEL_STARTUP_OPTS} \
 		build \
 		${BAZEL_BUILD_OPTS} \
 		--repo_env=GOROOT=$$(${GO_CMD} env GOROOT) \
 		//:envoy
 
 do-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/bazel-bin/envoy \
 		${STAGEDIR}${PREFIX}/libexec/pomerium-envoy
 
 .include <bsd.port.mk>
diff --git a/www/pomerium-envoy-custom/distinfo b/www/pomerium-envoy-custom/distinfo
index 36eef2bc3b78..7228cd98a257 100644
--- a/www/pomerium-envoy-custom/distinfo
+++ b/www/pomerium-envoy-custom/distinfo
@@ -1,289 +1,289 @@
-TIMESTAMP = 1777618321
-SHA256 (pomerium-envoy-custom/41749943780b54b70b510b1b1a4805ae529e174a.zip) = 26de1f5b0497a3b4dba9b6157fc555f3c9f4e1f21214462ebff5b19649304e9f
-SIZE (pomerium-envoy-custom/41749943780b54b70b510b1b1a4805ae529e174a.zip) = 41271285
+TIMESTAMP = 1782359735
+SHA256 (pomerium-envoy-custom/ee7784f95f506e2a606ae668f0d9f70f9d26af83.zip) = 6064371695a3cae6819f45407d275dc432ce59b95bb18071cfd2e981295baa80
+SIZE (pomerium-envoy-custom/ee7784f95f506e2a606ae668f0d9f70f9d26af83.zip) = 41291859
 SHA256 (pomerium-envoy-custom/V_10_2_P1.zip) = 8eb83ec34ac4714ca3c545e593d5cfb7f383ee80cfcafd9a04424539390a6398
 SIZE (pomerium-envoy-custom/V_10_2_P1.zip) = 2447062
 SHA256 (pomerium-envoy-custom/a413fcc9c46a020a746907136a384c227f3cd095.zip) = 4fd719717102b308527528fa26ea93ce3c9d583aae8ffaf68e1199906ce22382
 SIZE (pomerium-envoy-custom/a413fcc9c46a020a746907136a384c227f3cd095.zip) = 245529
 SHA256 (pomerium-envoy-custom/v1.0.7.zip) = ab5535466d0379963e5944a85ad3cd08c033006ddff0380cbb79d5c2a80f43db
 SIZE (pomerium-envoy-custom/v1.0.7.zip) = 71167
 SHA256 (pomerium-envoy-custom/bazel-skylib-1.7.1.tar.gz) = bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f
 SIZE (pomerium-envoy-custom/bazel-skylib-1.7.1.tar.gz) = 43566
 SHA256 (pomerium-envoy-custom/v1.0.4.zip) = 9372f9ecde8fbadf83c8c7de3dbb49b11067aa26fb608c501106d0b4bf06c28f
 SIZE (pomerium-envoy-custom/v1.0.4.zip) = 293896
 SHA256 (pomerium-envoy-custom/rules_jvm_external-6.1.tar.gz) = 08ea921df02ffe9924123b0686dc04fd0ff875710bfadb7ad42badb931b0fd50
 SIZE (pomerium-envoy-custom/rules_jvm_external-6.1.tar.gz) = 4711562
 SHA256 (pomerium-envoy-custom/114a745b2841a044e98cdbb19358ed29fcf4a5f1.tar.gz) = 9b4e0d0a04a217c06b426aefd03b82581a9510ca766d2d1c70e52bb2ad4a0703
 SIZE (pomerium-envoy-custom/114a745b2841a044e98cdbb19358ed29fcf4a5f1.tar.gz) = 6780277
 SHA256 (pomerium-envoy-custom/v0.4.1.tar.gz) = e3d89f7f9ed84c9b6eee818c2e9306950519402bf803698b15c310b77ca2f0f3
 SIZE (pomerium-envoy-custom/v0.4.1.tar.gz) = 164379
 SHA256 (pomerium-envoy-custom/v0.6.1.tar.gz) = b9b690bc35d80061f255faa7df7621eae39fe157179ccd78ff6409c3b004f05e
 SIZE (pomerium-envoy-custom/v0.6.1.tar.gz) = 17373
 SHA256 (pomerium-envoy-custom/5.3.0-21.7.tar.gz) = dc3fb206a2cb3441b485eb1e423165b231235a1ea9b031b4433cf7bc1fa460dd
 SIZE (pomerium-envoy-custom/5.3.0-21.7.tar.gz) = 15191
 SHA256 (pomerium-envoy-custom/buf-Linux-x86_64.tar.gz) = 16253b6702dd447ef941b01c9c386a2ab7c8d20bbbc86a5efa5953270f6c9010
 SIZE (pomerium-envoy-custom/buf-Linux-x86_64.tar.gz) = 21887919
 SHA256 (pomerium-envoy-custom/v0.15.0.tar.gz) = 3ee09eb69dbe77722e9dee23dc48dc2cd9f765869fcf5ffb1226587c81791a0b
 SIZE (pomerium-envoy-custom/v0.15.0.tar.gz) = 211940
 SHA256 (pomerium-envoy-custom/bazel-v0.1.3.tar.gz) = ee6d0b08ae3d9659f5fc34d752578af195147b153f8ca68eb4f8530aceb764d9
 SIZE (pomerium-envoy-custom/bazel-v0.1.3.tar.gz) = 2634567
 SHA256 (pomerium-envoy-custom/bazel_features-v1.36.0.tar.gz) = 9390b391a68d3b24aef7966bce8556d28003fe3f022a5008efc7807e8acaaf1a
 SIZE (pomerium-envoy-custom/bazel_features-v1.36.0.tar.gz) = 17428
 SHA256 (pomerium-envoy-custom/bazel-gazelle-v0.45.0.tar.gz) = e467b801046b6598c657309b45d2426dc03513777bd1092af2c62eebf990aca5
 SIZE (pomerium-envoy-custom/bazel-gazelle-v0.45.0.tar.gz) = 2187039
 SHA256 (pomerium-envoy-custom/supply-chain-v0.0.5.tar.gz) = 49ed11e5d6b752c55fa539cbb10b2736974f347b081d7bd500a80dacb7dbec06
 SIZE (pomerium-envoy-custom/supply-chain-v0.0.5.tar.gz) = 38614
 SHA256 (pomerium-envoy-custom/bazel-skylib-1.8.2.tar.gz) = 6e78f0e57de26801f6f564fa7c4a48dc8b36873e416257a92bbb0937eeac8446
 SIZE (pomerium-envoy-custom/bazel-skylib-1.8.2.tar.gz) = 44667
 SHA256 (pomerium-envoy-custom/msgpack-cxx-6.1.0.tar.gz) = 23ede7e93c8efee343ad8c6514c28f3708207e5106af3b3e4969b3a9ed7039e7
 SIZE (pomerium-envoy-custom/msgpack-cxx-6.1.0.tar.gz) = 478452
 SHA256 (pomerium-envoy-custom/googletest-1.17.0.tar.gz) = 65fab701d9829d38cb77c14acdc431d2108bfdbf8979e40eb8ae567edf10b27c
 SIZE (pomerium-envoy-custom/googletest-1.17.0.tar.gz) = 885595
 SHA256 (pomerium-envoy-custom/gperftools-2.17.2.tar.gz) = bb172a54312f623b53d8b94cab040248c559decdb87574ed873e80b516e6e8eb
 SIZE (pomerium-envoy-custom/gperftools-2.17.2.tar.gz) = 2815669
 SHA256 (pomerium-envoy-custom/rules_go-v0.59.0.zip) = 68af54cb97fbdee5e5e8fe8d210d15a518f9d62abfd71620c3eaff3b26a5ff86
 SIZE (pomerium-envoy-custom/rules_go-v0.59.0.zip) = 2546753
 SHA256 (pomerium-envoy-custom/rules_cc-0.2.8.tar.gz) = 207ea073dd20a705f9e8bc5ac02f5203e9621fc672774bb1a0935aefab7aebfa
 SIZE (pomerium-envoy-custom/rules_cc-0.2.8.tar.gz) = 277619
 SHA256 (pomerium-envoy-custom/rules_java-7.12.5.tar.gz) = 17b18cb4f92ab7b94aa343ce78531b73960b1bed2ba166e5b02c9fdf0b0ac270
 SIZE (pomerium-envoy-custom/rules_java-7.12.5.tar.gz) = 74752
 SHA256 (pomerium-envoy-custom/java_tools-v13.6.1.zip) = 74c978eab040ad4ec38ce0d0970ac813cc2c6f4f6f4f121c0414719487edc991
 SIZE (pomerium-envoy-custom/java_tools-v13.6.1.zip) = 37662433
 SHA256 (pomerium-envoy-custom/rules_license-1.0.0.tar.gz) = 26d4021f6898e23b82ef953078389dd49ac2b5618ac564ade4ef87cced147b38
 SIZE (pomerium-envoy-custom/rules_license-1.0.0.tar.gz) = 35903
 SHA256 (pomerium-envoy-custom/7.1.0.tar.gz) = 14a225870ab4e91869652cfd69ef2028277fc1dc4910d65d353b62d6e0ae21f4
 SIZE (pomerium-envoy-custom/7.1.0.tar.gz) = 36376
 SHA256 (pomerium-envoy-custom/rules_proto_grpc-4.6.0.tar.gz) = 2a0860a336ae836b54671cbbe0710eec17c64ef70c4c5a88ccfd47ea6e3739bd
 SIZE (pomerium-envoy-custom/rules_proto_grpc-4.6.0.tar.gz) = 334001
 SHA256 (pomerium-envoy-custom/rules_rust-0.56.0.tar.gz) = f1306aac0b258b790df01ad9abc6abb0df0b65416c74b4ef27f4aab298780a64
 SIZE (pomerium-envoy-custom/rules_rust-0.56.0.tar.gz) = 2402413
 SHA256 (pomerium-envoy-custom/rules_shell-v0.6.1.tar.gz) = e6b87c89bd0b27039e3af2c5da01147452f240f75d505f5b6880874f31036307
 SIZE (pomerium-envoy-custom/rules_shell-v0.6.1.tar.gz) = 23916
 SHA256 (pomerium-envoy-custom/singleheader.zip) = a8d2b481a2089280b84df7dc234223b658056b5bbd40bd4d476902d25d353a1f
 SIZE (pomerium-envoy-custom/singleheader.zip) = 3087151
 SHA256 (pomerium-envoy-custom/toolchains_llvm-v1.6.0.tar.gz) = 2b298a1d7ea99679f5edf8af09367363e64cb9fbc46e0b7c1b1ba2b1b1b51058
 SIZE (pomerium-envoy-custom/toolchains_llvm-v1.6.0.tar.gz) = 121479
 SHA256 (pomerium-envoy-custom/v1.3.0.zip) = 0ce70c9d0bc3381e2fde48e169589f477522cb3adcbb8be327b069d0071430aa
 SIZE (pomerium-envoy-custom/v1.3.0.zip) = 302448
 SHA256 (pomerium-envoy-custom/7680e4998426e62b6896995ff73d4d91cc5fb13c.zip) = ba3e313b10a1b50a6c1232d994c13f6e23d3669be4ae7fea13762f42bb3b2abc
 SIZE (pomerium-envoy-custom/7680e4998426e62b6896995ff73d4d91cc5fb13c.zip) = 141816
 SHA256 (pomerium-envoy-custom/1.1.0.tar.gz) = 0faf28467ed9bf881d8b58084d1a512a82df74bbb5182c806166d0d26b239fa4
 SIZE (pomerium-envoy-custom/1.1.0.tar.gz) = 297592
 SHA256 (pomerium-envoy-custom/platforms-1.0.0.tar.gz) = 3384eb1c30762704fbe38e440204e114154086c8fc8a8c2e3e28441028c019a8
 SIZE (pomerium-envoy-custom/platforms-1.0.0.tar.gz) = 7879
 SHA256 (pomerium-envoy-custom/protobuf-29.3.tar.gz) = 008a11cc56f9b96679b4c285fd05f46d317d685be3ab524b2a310be0fbad987e
 SIZE (pomerium-envoy-custom/protobuf-29.3.tar.gz) = 9348951
 SHA256 (pomerium-envoy-custom/glib-2.26.1.tar.gz) = bc96f63112823b7d6c9f06572d2ad626ddac7eb452c04d762592197f6e07898e
 SIZE (pomerium-envoy-custom/glib-2.26.1.tar.gz) = 9549297
 SHA256 (pomerium-envoy-custom/pkg-config-0.29.2.tar.gz) = 6fc69c01688c9458a57eb9a1664c9aba372ccda420a02bf4429fe610e7e7d591
 SIZE (pomerium-envoy-custom/pkg-config-0.29.2.tar.gz) = 2016830
 SHA256 (pomerium-envoy-custom/1db76535b86b80aa97489a1edcc7009e18b67ab7.zip) = 9555d9cf7bd541ea5fdb67d7d6b72ea44da77df3e27b960b4155dc0c6b81d476
 SIZE (pomerium-envoy-custom/1db76535b86b80aa97489a1edcc7009e18b67ab7.zip) = 269146
 SHA256 (pomerium-envoy-custom/d5d39f0373e9b6691c32c85929838b1006bcb3fb.zip) = cba864db90806515afa553aaa2fb3683df2859a7535e53a32cb9619da9cebc59
 SIZE (pomerium-envoy-custom/d5d39f0373e9b6691c32c85929838b1006bcb3fb.zip) = 77154
 SHA256 (pomerium-envoy-custom/279353cfab372ac7f268ae529df29c4d546ca18d.zip) = bac7a0d02fd8533cd5ce6d0f39dc324fc0565702d85a9ee3b65b0be8e7cbdd8d
 SIZE (pomerium-envoy-custom/279353cfab372ac7f268ae529df29c4d546ca18d.zip) = 138561
 SHA256 (pomerium-envoy-custom/6c7c925b571d54486b9ffae8d9d18a822801cbda.zip) = 2f10448d665355b41f599e869ac78803f82f13b070ce7ef5ae7b5cceb8a178f3
 SIZE (pomerium-envoy-custom/6c7c925b571d54486b9ffae8d9d18a822801cbda.zip) = 4280032
 SHA256 (pomerium-envoy-custom/0a92994d729ff76a58f692d3028ca1b64b145d91.zip) = e66e65515fa09927b348d3d584c68be4215cfe664100d01c9dbc7655a5716d70
 SIZE (pomerium-envoy-custom/0a92994d729ff76a58f692d3028ca1b64b145d91.zip) = 91373
 SHA256 (pomerium-envoy-custom/e965ac0ac6db6686169678e2a6c77ede904fa82c.zip) = b83b8ea7a937ce7f5d6870421be8f9a5343e8c2de2bd2e269452981d67da1509
 SIZE (pomerium-envoy-custom/e965ac0ac6db6686169678e2a6c77ede904fa82c.zip) = 264742
 SHA256 (pomerium-envoy-custom/3.9.1.zip) = c15b82940cfb9f67fce909d8600dc8bcfc42d2795da2c26c149d03a627f85234
 SIZE (pomerium-envoy-custom/3.9.1.zip) = 19556818
 SHA256 (pomerium-envoy-custom/antlr-4.13.1-complete.jar) = bc13a9c57a8dd7d5196888211e5ede657cb64a3ce968608697e4f668251a8487
 SIZE (pomerium-envoy-custom/antlr-4.13.1-complete.jar) = 2139203
 SHA256 (pomerium-envoy-custom/4.13.1.zip) = 365ff6aec0b1612fb964a763ca73748d80e0b3379cbdd9f82d86333eb8ae4638
 SIZE (pomerium-envoy-custom/4.13.1.zip) = 5405938
 SHA256 (pomerium-envoy-custom/v1.68.0.zip) = 02a23b873909d3a7f46b1ab5e822b698aeec0e79538924e5edb21838e7fda562
 SIZE (pomerium-envoy-custom/v1.68.0.zip) = 2318342
 SHA256 (pomerium-envoy-custom/v0.34.0.zip) = 49c43b74811dc9864fe35dcfcc8b1c64917d2cce30882adde4f86a981465b594
 SIZE (pomerium-envoy-custom/v0.34.0.zip) = 1852804
 SHA256 (pomerium-envoy-custom/v0.21.0.zip) = be3db791651af6f2cb0225aa5d5578c23149b2017246ba8e59586080baadd612
 SIZE (pomerium-envoy-custom/v0.21.0.zip) = 9233989
 SHA256 (pomerium-envoy-custom/ab9386a59fda.zip) = 82c1e17e9a8c9a617eb8e03251631d1fbda5a99e75d8862012caa232f7148876
 SIZE (pomerium-envoy-custom/ab9386a59fda.zip) = 7292961
 SHA256 (pomerium-envoy-custom/v1.36.10.zip) = 9265fbe7d073ca8571f1a9c4b8e8f20b244c35ad913346892d688e58fe4b1f22
 SIZE (pomerium-envoy-custom/v1.36.10.zip) = 2263898
 SHA256 (pomerium-envoy-custom/v0.0.0-20251110193048-8bfbf64dc13e.zip) = 1470f508c707ad8df9d6a97b3eaf9e2050e8bc25f78b4a7961d93de5b5852f46
 SIZE (pomerium-envoy-custom/v0.0.0-20251110193048-8bfbf64dc13e.zip) = 143012
 SHA256 (pomerium-envoy-custom/v0.25.1.zip) = 12652bea2461aa29004d23052d3a08cb5911ab0a652469ef5da6efb37c12ee87
 SIZE (pomerium-envoy-custom/v0.25.1.zip) = 239588
 SHA256 (pomerium-envoy-custom/v1.10.0.zip) = 96f549d577731c5f75d5a1b2bf8b937ff4300fab318197776af4f335c0bc0ff6
 SIZE (pomerium-envoy-custom/v1.10.0.zip) = 127679
 SHA256 (pomerium-envoy-custom/v2.0.4-0.20230330145011-496ad1ac90a4.zip) = d686a45affe55f593f20f4bfa6e83dec3fe67d51bb81346358366ca878a9f02c
 SIZE (pomerium-envoy-custom/v2.0.4-0.20230330145011-496ad1ac90a4.zip) = 206962
 SHA256 (pomerium-envoy-custom/v0.3.0.zip) = fe8d071a2f64f2fdf24a0b080a7fd277488bc4840503d7475045070fe50c3f58
 SIZE (pomerium-envoy-custom/v0.3.0.zip) = 10735
 SHA256 (pomerium-envoy-custom/v0.6.1-0.20240409071808-615f978279ca.zip) = 19e38fb1b826fb2f9c1d212670d6e5c1119797852f801d97f26722eeffc437b7
 SIZE (pomerium-envoy-custom/v0.6.1-0.20240409071808-615f978279ca.zip) = 278339
 SHA256 (pomerium-envoy-custom/v1.5.0.zip) = deb3b2ac476a7f74685091fa60c59d50110c7e1d333ea78281422d8441f2411d
 SIZE (pomerium-envoy-custom/v1.5.0.zip) = 206670
 SHA256 (pomerium-envoy-custom/v1.3.0.tar.gz) = 26dc6db523ee943af51fdfc292658a2dbe7046735654f1dc839745988f0fe26b
 SIZE (pomerium-envoy-custom/v1.3.0.tar.gz) = 190514
 SHA256 (pomerium-envoy-custom/v0.0.0-20210918223802-a1d3f4b43d7b.zip) = b2bbc906a46d343b922137cf1f5193658ca7a725e95de55bd1a5cd1bf402dfc4
 SIZE (pomerium-envoy-custom/v0.0.0-20210918223802-a1d3f4b43d7b.zip) = 34667
 SHA256 (pomerium-envoy-custom/v1.1.1.zip) = 6b44a843951f371b7010c754ecc3cabefe815d5ced1c5b9409fb2d697e8a890d
 SIZE (pomerium-envoy-custom/v1.1.1.zip) = 60320
 SHA256 (pomerium-envoy-custom/v1.0.0.zip) = 54664f64f1f24097b80c64b9f606cbe8d8bc410a755ce6cda4f45e46f1141984
 SIZE (pomerium-envoy-custom/v1.0.0.zip) = 4266
 SHA256 (pomerium-envoy-custom/v0.5.5.zip) = 0ee90a7194c025d849699f897d97641b8676ceca9215c96e00eaf1f0e6e953ad
 SIZE (pomerium-envoy-custom/v0.5.5.zip) = 130974
 SHA256 (pomerium-envoy-custom/v0.2.0.zip) = a2cb542eb8bedcb07370d0779e2bb3694363418c44c3b70865613f6dd81342b7
 SIZE (pomerium-envoy-custom/v0.2.0.zip) = 6412
 SHA256 (pomerium-envoy-custom/v1.4.2.zip) = 9a8e55830261a4b1c9350d7c45db029c8586c0b2d934d1224cde469425031edd
 SIZE (pomerium-envoy-custom/v1.4.2.zip) = 58627
 SHA256 (pomerium-envoy-custom/v0.1.1.zip) = 03599ec1d6888e9bf0429346d95a6c07c64d60614b5e4af36f234cce220c7ca0
 SIZE (pomerium-envoy-custom/v0.1.1.zip) = 37190
 SHA256 (pomerium-envoy-custom/v1.6.1.zip) = e3c77324195658ead0289c507966fec55c69a7b1b8e3aac13c587dc50932fbc3
 SIZE (pomerium-envoy-custom/v1.6.1.zip) = 98541
 SHA256 (pomerium-envoy-custom/v0.0.0-20190809123943-df4f5c81cb3b.zip) = 54a11fd3e2950dea8d0032f7ef2bd625768369d0d27b0837e299eb7cec50b7b9
 SIZE (pomerium-envoy-custom/v0.0.0-20190809123943-df4f5c81cb3b.zip) = 9417
 SHA256 (pomerium-envoy-custom/v0.0.0-20180127040603-bd5ef7bd5415.zip) = 7ec98f4df894413f4dc58c8df330ca8b24ff425b05a8e1074c3028c99f7e45e7
 SIZE (pomerium-envoy-custom/v0.0.0-20180127040603-bd5ef7bd5415.zip) = 8632
 SHA256 (pomerium-envoy-custom/v1.2.0.zip) = 55c8ce068257aa0d263aad7470113dafcd50f955ee754fc853c2fdcd31ad096f
 SIZE (pomerium-envoy-custom/v1.2.0.zip) = 138176
 SHA256 (pomerium-envoy-custom/v1.0.0-20180628173108-788fd7840127.zip) = 4bc535ed2aac48a231af8b6005a0b5f6069dadab9a3d65b1e9f1fe91c74d8e61
 SIZE (pomerium-envoy-custom/v1.0.0-20180628173108-788fd7840127.zip) = 41465
 SHA256 (pomerium-envoy-custom/v3.0.0-20200313102051-9f266ea9e77c.zip) = acf19ccb4fca983b234a39ef032faf9ab70e759680673bb3dff077e77fee20fe
 SIZE (pomerium-envoy-custom/v3.0.0-20200313102051-9f266ea9e77c.zip) = 101467
 SHA256 (pomerium-envoy-custom/v0.0.0-20210508222113-6edffad5e616.zip) = 0a4a5ebd2b1d79e7f480cbf5a54b45a257ae1ec9d11f01688efc5c35268d4603
 SIZE (pomerium-envoy-custom/v0.0.0-20210508222113-6edffad5e616.zip) = 46224
 SHA256 (pomerium-envoy-custom/v0.9.0.zip) = ad0b72a29c07f57d92612fdbc2da6891b3988dd98b31d2fdcbe8ddb9c8cc2d52
 SIZE (pomerium-envoy-custom/v0.9.0.zip) = 162290
 SHA256 (pomerium-envoy-custom/v0.7.0.zip) = e620541456e725349341621b2daaa03e3470ce7edd34c2e57c6ba3fe036deff6
 SIZE (pomerium-envoy-custom/v0.7.0.zip) = 1893247
 SHA256 (pomerium-envoy-custom/v0.0.0-20191204190536-9bdfabe68543.zip) = a93010abd3c4f483710c37fb87511a776942f709b4c1820a28d099d448680390
 SIZE (pomerium-envoy-custom/v0.0.0-20191204190536-9bdfabe68543.zip) = 22282
-SHA256 (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 32403b027c0970e328e6746a166c166d5eb7b8ea331dabecb73591650921f683
-SIZE (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 368293
+SHA256 (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = b16b4fdcf7f5990f73c3097b972c3fc0c5d4045736e65b6f768cfab2e8761400
+SIZE (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = 368288
 SHA256 (pomerium-envoy-custom/aspect-build-bazel-lib-v2.16.0_GH0.tar.gz) = 092f841dd9ea8e736ea834f304877a25190a762d0f0a6c8edac9f94aac8bbf16
 SIZE (pomerium-envoy-custom/aspect-build-bazel-lib-v2.16.0_GH0.tar.gz) = 191222
 SHA256 (pomerium-envoy-custom/grailbio-bazel-compilation-database-40864791135333e1446a04553b63cbe744d358d0_GH0.tar.gz) = acd2a9eaf49272bb1480c67d99b82662f005b596a8c11739046a4220ec73c4da
 SIZE (pomerium-envoy-custom/grailbio-bazel-compilation-database-40864791135333e1446a04553b63cbe744d358d0_GH0.tar.gz) = 16066
 SHA256 (pomerium-envoy-custom/bazelbuild-bazel-toolchains-v5.1.2_GH0.tar.gz) = 02e4f3744f1ce3f6e711e261fd322916ddd18cccd38026352f7a4c0351dbda19
 SIZE (pomerium-envoy-custom/bazelbuild-bazel-toolchains-v5.1.2_GH0.tar.gz) = 80663
 SHA256 (pomerium-envoy-custom/google-boringssl-0.20250514.0_GH0.tar.gz) = 71ef1eb84a035a033ad55867f89a141ddb2e5c5829dd4035ea7803bfff0257ed
 SIZE (pomerium-envoy-custom/google-boringssl-0.20250514.0_GH0.tar.gz) = 46140802
 SHA256 (pomerium-envoy-custom/civetweb-civetweb-v1.16_GH0.tar.gz) = f0e471c1bf4e7804a6cfb41ea9d13e7d623b2bcc7bc1e2a4dd54951a24d60285
 SIZE (pomerium-envoy-custom/civetweb-civetweb-v1.16_GH0.tar.gz) = 12094780
 SHA256 (pomerium-envoy-custom/Kitware-CMake-v3.23.2_GH0.tar.gz) = b19401d6816d1153f0f8e14e99377b86d8b07abccfadf2ed2aa4de7572b43ada
 SIZE (pomerium-envoy-custom/Kitware-CMake-v3.23.2_GH0.tar.gz) = 9987674
 SHA256 (pomerium-envoy-custom/aignas-rules_shellcheck-0.4.0_GH0.tar.gz) = cef935ea1088d2b45c5bc3630f8178c91ba367b071af2bfdcd16c042c5efe8ae
 SIZE (pomerium-envoy-custom/aignas-rules_shellcheck-0.4.0_GH0.tar.gz) = 8779
 SHA256 (pomerium-envoy-custom/alibaba-hessian2-codec-6f5a64770f0374a761eece13c8863b80dc5adcd8_GH0.tar.gz) = bb4c4af6a7e3031160bf38dfa957b0ee950e2d8de47d4ba14c7a658c3a2c74d1
 SIZE (pomerium-envoy-custom/alibaba-hessian2-codec-6f5a64770f0374a761eece13c8863b80dc5adcd8_GH0.tar.gz) = 70906
 SHA256 (pomerium-envoy-custom/awslabs-aws-c-auth-v0.9.1_GH0.tar.gz) = adae1e725d9725682366080b8bf8e49481650c436b846ceeb5efe955d5e03273
 SIZE (pomerium-envoy-custom/awslabs-aws-c-auth-v0.9.1_GH0.tar.gz) = 265755
 SHA256 (pomerium-envoy-custom/bazelbuild-buildtools-v8.2.1_GH0.tar.gz) = 53119397bbce1cd7e4c590e117dcda343c2086199de62932106c80733526c261
 SIZE (pomerium-envoy-custom/bazelbuild-buildtools-v8.2.1_GH0.tar.gz) = 342493
 SHA256 (pomerium-envoy-custom/cncf-xds-8bfbf64dc13ee1a570be4fbdcfccbdd8532463f0_GH0.tar.gz) = 82363065ca2c978398d2307fe960c301a0b6655d55981fac017783bba22771d9
 SIZE (pomerium-envoy-custom/cncf-xds-8bfbf64dc13ee1a570be4fbdcfccbdd8532463f0_GH0.tar.gz) = 181512
 SHA256 (pomerium-envoy-custom/curl-curl-curl-8_5_0_GH0.tar.gz) = 8117d24a8c29a0c3aa160703eb487694f3d4aa72ea2067b45beb439ea4d47668
 SIZE (pomerium-envoy-custom/curl-curl-curl-8_5_0_GH0.tar.gz) = 3278993
 SHA256 (pomerium-envoy-custom/DataDog-dd-trace-cpp-v0.2.2_GH0.tar.gz) = ee524a9b70d39dcfd815b90d9d6fc5599db7989dff072980bff90bae81c4daf7
 SIZE (pomerium-envoy-custom/DataDog-dd-trace-cpp-v0.2.2_GH0.tar.gz) = 4504765
 SHA256 (pomerium-envoy-custom/envoyproxy-sql-parser-3b40ba2d106587bdf053a292f7e3bb17e818a57f_GH0.tar.gz) = 96c10c8e950a141a32034f19b19cdeb1da48fe859cf96ae5e19f894f36c62c71
 SIZE (pomerium-envoy-custom/envoyproxy-sql-parser-3b40ba2d106587bdf053a292f7e3bb17e818a57f_GH0.tar.gz) = 181090
 SHA256 (pomerium-envoy-custom/FDio-vpp-8ca922e1d6d0fe8af28e539505d3c3a211642a91_GH0.tar.gz) = b86554fb7821cf7ecb35d6d90022eded67c8acb24ff35575bc547afef7dfb72f
 SIZE (pomerium-envoy-custom/FDio-vpp-8ca922e1d6d0fe8af28e539505d3c3a211642a91_GH0.tar.gz) = 22577146
 SHA256 (pomerium-envoy-custom/google-jwt_verify_lib-b59e8075d4a4f975ba6f109e1916d6e60aeb5613_GH0.tar.gz) = 637e4983506c4f26bbe2808ae4e1944e46cbb2277d34ff0b8a3b72bdac3c4b91
 SIZE (pomerium-envoy-custom/google-jwt_verify_lib-b59e8075d4a4f975ba6f109e1916d6e60aeb5613_GH0.tar.gz) = 94364
 SHA256 (pomerium-envoy-custom/google-libsxg-beaa3939b76f8644f6833267e9f2462760838f18_GH0.tar.gz) = 082bf844047a9aeec0d388283d5edc68bd22bcf4d32eb5a566654ae89956ad1f
 SIZE (pomerium-envoy-custom/google-libsxg-beaa3939b76f8644f6833267e9f2462760838f18_GH0.tar.gz) = 59458
 SHA256 (pomerium-envoy-custom/google-perfetto-v52.0_GH0.tar.gz) = 1872349439820e241003a9862cb69f4d535926c437d5316b49ce4a820613539d
 SIZE (pomerium-envoy-custom/google-perfetto-v52.0_GH0.tar.gz) = 47813557
 SHA256 (pomerium-envoy-custom/google-quiche-9d155f645b33e283ca741ba16002a71ed382cbf0_GH0.tar.gz) = a5c60acfcf251210c2fcd7054419cab06b4637848ea514f75f4994557a5fb981
 SIZE (pomerium-envoy-custom/google-quiche-9d155f645b33e283ca741ba16002a71ed382cbf0_GH0.tar.gz) = 3260959
 SHA256 (pomerium-envoy-custom/google-tcmalloc-0c3faab546c22d67e11327c6c6c7c34c1707c5db_GH0.tar.gz) = 621824a62f56ea25f947bb64e107b7c6fb8b31199c46115dc783a670be35e2ca
 SIZE (pomerium-envoy-custom/google-tcmalloc-0c3faab546c22d67e11327c6c6c7c34c1707c5db_GH0.tar.gz) = 995005
 SHA256 (pomerium-envoy-custom/grpc-grpc-v1.72.0_GH0.tar.gz) = 4a8aa99d5e24f80ea6b7ec95463e16af5bd91aa805e26c661ef6491ae3d2d23c
 SIZE (pomerium-envoy-custom/grpc-grpc-v1.72.0_GH0.tar.gz) = 14730317
 SHA256 (pomerium-envoy-custom/libevent-libevent-62c152d9a7cd264b993dad730c4163c6ede2e0a3_GH0.tar.gz) = 4c80e5fe044ce5f8055b20a2f141ee32ec2614000f3e95d2aa81611a4c8f5213
 SIZE (pomerium-envoy-custom/libevent-libevent-62c152d9a7cd264b993dad730c4163c6ede2e0a3_GH0.tar.gz) = 788396
 SHA256 (pomerium-envoy-custom/LuaJIT-LuaJIT-871db2c84ecefd70a850e03a6c340214a81739f0_GH0.tar.gz) = ab3f16d82df6946543565cfb0d2810d387d79a3a43e0431695b03466188e2680
 SIZE (pomerium-envoy-custom/LuaJIT-LuaJIT-871db2c84ecefd70a850e03a6c340214a81739f0_GH0.tar.gz) = 1084103
 SHA256 (pomerium-envoy-custom/ncopa-su-exec-v0.3_GH0.tar.gz) = 1de7479857879b6d14772792375290a87eac9a37b0524d39739a4a0739039620
 SIZE (pomerium-envoy-custom/ncopa-su-exec-v0.3_GH0.tar.gz) = 3921
 SHA256 (pomerium-envoy-custom/openhistogram-libcircllhist-39f9db724a81ba78f5d037f1cae79c5a07107c8e_GH0.tar.gz) = fd2492f6cc1f8734f8f57be8c2e7f2907e94ee2a4c02445ce59c4241fece144b
 SIZE (pomerium-envoy-custom/openhistogram-libcircllhist-39f9db724a81ba78f5d037f1cae79c5a07107c8e_GH0.tar.gz) = 79972
 SHA256 (pomerium-envoy-custom/openzipkin-zipkin-api-1.0.0_GH0.tar.gz) = 6c8ee2014cf0746ba452e5f2c01f038df60e85eb2d910b226f9aa27ddc0e44cf
 SIZE (pomerium-envoy-custom/openzipkin-zipkin-api-1.0.0_GH0.tar.gz) = 135402
 SHA256 (pomerium-envoy-custom/SkyAPM-cpp2sky-v0.6.0_GH0.tar.gz) = d7e52f517de5a1dc7d927dd63a2e5aa5cf8c2dcfd8fcf6b64e179978daf1c3ed
 SIZE (pomerium-envoy-custom/SkyAPM-cpp2sky-v0.6.0_GH0.tar.gz) = 45278
 SHA256 (pomerium-envoy-custom/unicode-org-icu-release-77-1_GH0.tar.gz) = ded3a96f6b7236d160df30af46593165b9c78a4ec72a414aa63cf50614e4c14e
 SIZE (pomerium-envoy-custom/unicode-org-icu-release-77-1_GH0.tar.gz) = 68285934
 SHA256 (pomerium-envoy-custom/zlib-ng-zlib-ng-2.2.5_GH0.tar.gz) = 5b3b022489f3ced82384f06db1e13ba148cbce38c7941e424d6cb414416acd18
 SIZE (pomerium-envoy-custom/zlib-ng-zlib-ng-2.2.5_GH0.tar.gz) = 2417402
 SHA256 (pomerium-envoy-custom/abseil-abseil-cpp-20250814.1_GH0.tar.gz) = 1692f77d1739bacf3f94337188b78583cf09bab7e420d2dc6c5605a4f86785a1
 SIZE (pomerium-envoy-custom/abseil-abseil-cpp-20250814.1_GH0.tar.gz) = 2235716
 SHA256 (pomerium-envoy-custom/google-cel-cpp-v0.13.0_GH0.tar.gz) = 5766e26732c779b83daf37f9e7584ddee9748adcde662bf1f2291bbeb13e1a0a
 SIZE (pomerium-envoy-custom/google-cel-cpp-v0.13.0_GH0.tar.gz) = 1133661
 SHA256 (pomerium-envoy-custom/google-cel-spec-v0.24.0_GH0.tar.gz) = 5cba6b0029e727d1f4d8fd134de4e747cecc0bc293d026017d7edc48058d09f7
 SIZE (pomerium-envoy-custom/google-cel-spec-v0.24.0_GH0.tar.gz) = 223990
 SHA256 (pomerium-envoy-custom/googleapis-googleapis-fd52b5754b2b268bc3a22a10f29844f206abb327_GH0.tar.gz) = 97fc354dddfd3ea03e7bf2ad74129291ed6fad7ff39d3bd8daec738a3672eb8a
 SIZE (pomerium-envoy-custom/googleapis-googleapis-fd52b5754b2b268bc3a22a10f29844f206abb327_GH0.tar.gz) = 8777031
 SHA256 (pomerium-envoy-custom/confluentinc-librdkafka-v2.6.0_GH0.tar.gz) = abe0212ecd3e7ed3c4818a4f2baf7bf916e845e902bb15ae48834ca2d36ac745
 SIZE (pomerium-envoy-custom/confluentinc-librdkafka-v2.6.0_GH0.tar.gz) = 4553648
 SHA256 (pomerium-envoy-custom/cython-cython-0.29.35_GH0.tar.gz) = a2da56cc22be823acf49741b9aa3aa116d4f07fa8e8b35a3cb08b8447b37c607
 SIZE (pomerium-envoy-custom/cython-cython-0.29.35_GH0.tar.gz) = 2115190
 SHA256 (pomerium-envoy-custom/envoyproxy-examples-v0.1.2_GH0.tar.gz) = 42b005266f1a6650bd215afe34c8ec3086cfd1f8c7337dbc873fa336c57ac720
 SIZE (pomerium-envoy-custom/envoyproxy-examples-v0.1.2_GH0.tar.gz) = 4434009
 SHA256 (pomerium-envoy-custom/envoyproxy-data-plane-api-f8b75d1efa92bbf534596a013d9ca5873f79dd30_GH0.tar.gz) = e525a6fb6e6ed3eef1eec6bef3da9b5708e471f0f9335a7604df14a4b386231e
 SIZE (pomerium-envoy-custom/envoyproxy-data-plane-api-f8b75d1efa92bbf534596a013d9ca5873f79dd30_GH0.tar.gz) = 678348
 SHA256 (pomerium-envoy-custom/envoyproxy-toolshed-bazel-v0.3.3_GH0.tar.gz) = 1ac69d5b1cbc138f779fc3858f06a6777455136260e1144010f0b51880f69814
 SIZE (pomerium-envoy-custom/envoyproxy-toolshed-bazel-v0.3.3_GH0.tar.gz) = 3071589
 SHA256 (pomerium-envoy-custom/fastfloat-fast_float-v7.0.0_GH0.tar.gz) = d2a08e722f461fe699ba61392cd29e6b23be013d0f56e50c7786d0954bffcb17
 SIZE (pomerium-envoy-custom/fastfloat-fast_float-v7.0.0_GH0.tar.gz) = 103358
 SHA256 (pomerium-envoy-custom/ninja-build-ninja-v1.13.1_GH0.tar.gz) = f0055ad0369bf2e372955ba55128d000cfcc21777057806015b45e4accbebf23
 SIZE (pomerium-envoy-custom/ninja-build-ninja-v1.13.1_GH0.tar.gz) = 292098
 SHA256 (pomerium-envoy-custom/google-gurl-dd4080fec0b443296c0ed0036e1e776df8813aa7_GH0.tar.gz) = 4ffa45a827646692e7b26e2a8c0dcbc1b1763a26def2fbbd82362970962a2fcf
 SIZE (pomerium-envoy-custom/google-gurl-dd4080fec0b443296c0ed0036e1e776df8813aa7_GH0.tar.gz) = 418767
 SHA256 (pomerium-envoy-custom/grpc-ecosystem-grpc-httpjson-transcoding-a6e226f9a2e656a973df3ad48f0ee5efacce1a28_GH0.tar.gz) = 45dc1a630f518df21b4e044e32b27c7b02ae77ef401b48a20e5ffde0f070113f
 SIZE (pomerium-envoy-custom/grpc-ecosystem-grpc-httpjson-transcoding-a6e226f9a2e656a973df3ad48f0ee5efacce1a28_GH0.tar.gz) = 615446
 SHA256 (pomerium-envoy-custom/google-highway-1.2.0_GH0.tar.gz) = 7e0be78b8318e8bdbf6fa545d2ecb4c90f947df03f7aadc42c1967f019e63343
 SIZE (pomerium-envoy-custom/google-highway-1.2.0_GH0.tar.gz) = 2234665
 SHA256 (pomerium-envoy-custom/open-telemetry-opentelemetry-cpp-v1.23.0_GH0.tar.gz) = 148ef298a4ef9e016228d53d7208ab9359d4fdf87f55649d60d07ffacc093b33
 SIZE (pomerium-envoy-custom/open-telemetry-opentelemetry-cpp-v1.23.0_GH0.tar.gz) = 1193184
 SHA256 (pomerium-envoy-custom/ninja-build-ninja-v1.11.1_GH0.tar.gz) = 31747ae633213f1eda3842686f83c2aa1412e0f5691d1c14dbbcc67fe7400cea
 SIZE (pomerium-envoy-custom/ninja-build-ninja-v1.11.1_GH0.tar.gz) = 229479
 SHA256 (pomerium-envoy-custom/numactl-numactl-v2.0.19_GH0.tar.gz) = 8b84ffdebfa0d730fb2fc71bb7ec96bb2d38bf76fb67246fde416a68e04125e4
 SIZE (pomerium-envoy-custom/numactl-numactl-v2.0.19_GH0.tar.gz) = 218333
 SHA256 (pomerium-envoy-custom/open-telemetry-opentelemetry-proto-v1.9.0_GH0.tar.gz) = 2d2220db196bdfd0aec872b75a5e614458f8396557fc718b28017e1a08db49e4
 SIZE (pomerium-envoy-custom/open-telemetry-opentelemetry-proto-v1.9.0_GH0.tar.gz) = 119325
 SHA256 (pomerium-envoy-custom/prometheus-client_model-v0.6.2_GH0.tar.gz) = 47c5ea7949f68e7f7b344350c59b6bd31eeb921f0eec6c3a566e27cf1951470c
 SIZE (pomerium-envoy-custom/prometheus-client_model-v0.6.2_GH0.tar.gz) = 17508
 SHA256 (pomerium-envoy-custom/proxy-wasm-proxy-wasm-cpp-host-65bb78fbf8beb6d3670701d35711e691c0c4c4ce_GH0.tar.gz) = a73bb64561d631097d4c1fb1c3c64f41f107b6186544565db70e74358b5f3ec3
 SIZE (pomerium-envoy-custom/proxy-wasm-proxy-wasm-cpp-host-65bb78fbf8beb6d3670701d35711e691c0c4c4ce_GH0.tar.gz) = 162273
 SHA256 (pomerium-envoy-custom/proxy-wasm-proxy-wasm-cpp-sdk-dc4f37efacd2ff7bf2e8f36632f22e1e99347f3e_GH0.tar.gz) = 487aef94e38eb2b717eb82aa5e3c7843b7da0c8b4624a5562c969050a1f3fa33
 SIZE (pomerium-envoy-custom/proxy-wasm-proxy-wasm-cpp-sdk-dc4f37efacd2ff7bf2e8f36632f22e1e99347f3e_GH0.tar.gz) = 7410019
 SHA256 (pomerium-envoy-custom/bufbuild-rules_buf-v0.5.2_GH0.tar.gz) = 19d845cedf32c0e74a01af8d0bd904872bddc7905f087318d00b332aa36d3929
 SIZE (pomerium-envoy-custom/bufbuild-rules_buf-v0.5.2_GH0.tar.gz) = 138675
 SHA256 (pomerium-envoy-custom/bazelbuild-rules_foreign_cc-0.15.1_GH0.tar.gz) = 32759728913c376ba45b0116869b71b68b1c2ebf8f2bcf7b41222bc07b773d73
 SIZE (pomerium-envoy-custom/bazelbuild-rules_foreign_cc-0.15.1_GH0.tar.gz) = 322715
 SHA256 (pomerium-envoy-custom/bazelbuild-rules_fuzzing-v0.6.0_GH0.tar.gz) = 850897989ebc06567ea06c959eb4a6129fa509ed2dbbd0d147d62d2b986714a9
 SIZE (pomerium-envoy-custom/bazelbuild-rules_fuzzing-v0.6.0_GH0.tar.gz) = 62095
 SHA256 (pomerium-envoy-custom/bazelbuild-rules_python-1.6.3_GH0.tar.gz) = 2f5c284fbb4e86045c2632d3573fc006facbca5d1fa02976e89dc0cd5488b590
 SIZE (pomerium-envoy-custom/bazelbuild-rules_python-1.6.3_GH0.tar.gz) = 929991
 SHA256 (pomerium-envoy-custom/protocolbuffers-rules_ruby-37cf5900d0b0e44fa379c0ea3f5fcee0035d77ca_GH0.tar.gz) = 24ed42b7e06907be993b21be603c130076c7d7e49d4f4d5bd228c5656a257f5e
 SIZE (pomerium-envoy-custom/protocolbuffers-rules_ruby-37cf5900d0b0e44fa379c0ea3f5fcee0035d77ca_GH0.tar.gz) = 2451645
 SHA256 (pomerium-envoy-custom/apache-skywalking-data-collect-protocol-v10.2.0_GH0.tar.gz) = e4e93723488b32dcdd16c399d7634fb1eb9444f3d54bd7229dc20eaa09bf4d1a
 SIZE (pomerium-envoy-custom/apache-skywalking-data-collect-protocol-v10.2.0_GH0.tar.gz) = 20949
 SHA256 (pomerium-envoy-custom/apache-thrift-v0.22.0_GH0.tar.gz) = c4649c5879dd56c88f1e7a1c03e0fbfcc3b2a2872fb81616bffba5aa8a225a37
 SIZE (pomerium-envoy-custom/apache-thrift-v0.22.0_GH0.tar.gz) = 3290344
 SHA256 (pomerium-envoy-custom/census-instrumentation-opencensus-cpp-5501a1a255805e0be83a41348bb5f2630d5ed6b3_GH0.tar.gz) = 46b3b5812c150a21bacf860c2f76fc42b89773ed77ee954c32adeb8593aa2a8e
 SIZE (pomerium-envoy-custom/census-instrumentation-opencensus-cpp-5501a1a255805e0be83a41348bb5f2630d5ed6b3_GH0.tar.gz) = 191703
 SHA256 (pomerium-envoy-custom/census-instrumentation-opencensus-proto-v0.3.0_GH0.tar.gz) = b7e13f0b4259e80c3070b583c2f39e53153085a6918718b1c710caf7037572b0
 SIZE (pomerium-envoy-custom/census-instrumentation-opencensus-proto-v0.3.0_GH0.tar.gz) = 163404
 SHA256 (pomerium-envoy-custom/Linaro-uadk-v2.9_GH0.tar.gz) = 857339dd270d1fb3c068eae0f912c8814d3490b7ff25e6ef200086fce2b57557
 SIZE (pomerium-envoy-custom/Linaro-uadk-v2.9_GH0.tar.gz) = 788950
 SHA256 (pomerium-envoy-custom/protocolbuffers-utf8_range-de0b4a8ff9b5d4c98108bdfe723291a33c52c54f_GH0.tar.gz) = 1a6bc8a477bc1a5e5c720e251d4703a016b2774099c6126091e91468a5c3536f
 SIZE (pomerium-envoy-custom/protocolbuffers-utf8_range-de0b4a8ff9b5d4c98108bdfe723291a33c52c54f_GH0.tar.gz) = 53050
 SHA256 (pomerium-envoy-custom/v8-v8-13.8.258.26_GH0.tar.gz) = 4ffc27074d3f79e8e6401e390443dcf02755349002be4a1b01e72a3cd9457d15
 SIZE (pomerium-envoy-custom/v8-v8-13.8.258.26_GH0.tar.gz) = 30881066
 SHA256 (pomerium-envoy-custom/bytecodealliance-wasm-micro-runtime-WAMR-2.2.0_GH0.tar.gz) = 93b6ba03f681e061967106046b1908631ee705312b9a6410f3baee7af7c6aac9
 SIZE (pomerium-envoy-custom/bytecodealliance-wasm-micro-runtime-WAMR-2.2.0_GH0.tar.gz) = 5785279
 SHA256 (pomerium-envoy-custom/bytecodealliance-wasmtime-v24.0.4_GH0.tar.gz) = d714d987a50cfc7d0b384ef4720e7c757cf4f5b7df617cbf38e432a3dc6c400d
 SIZE (pomerium-envoy-custom/bytecodealliance-wasmtime-v24.0.4_GH0.tar.gz) = 23494342
 SHA256 (pomerium-envoy-custom/intel-ittapi-a3911fff01a775023a06af8754f9ec1e5977dd97_GH0.tar.gz) = 1d0dddfc5abb786f2340565c82c6edd1cff10c917616a18ce62ee0b94dbc2ed4
 SIZE (pomerium-envoy-custom/intel-ittapi-a3911fff01a775023a06af8754f9ec1e5977dd97_GH0.tar.gz) = 128827
diff --git a/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch b/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
index a8434d350db9..40825a647903 100644
--- a/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
+++ b/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
@@ -1,174 +1,208 @@
-diff --git a/bazel/dependency_imports.bzl b/bazel/dependency_imports.bzl
-index fc4309a..fa9bcb2 100644
 --- a/bazel/dependency_imports.bzl
 +++ b/bazel/dependency_imports.bzl
-@@ -1,28 +1,16 @@
+@@ -1,96 +1,54 @@
 -load("@aspect_bazel_lib//lib:repositories.bzl", "register_jq_toolchains", "register_yq_toolchains")
-+load("@aspect_bazel_lib//lib:repositories.bzl", "register_jq_toolchains")
 -load("@base_pip3//:requirements.bzl", pip_dependencies = "install_deps")
++load("@aspect_bazel_lib//lib:repositories.bzl", "register_jq_toolchains")
  load("@bazel_gazelle//:deps.bzl", "gazelle_dependencies", "go_repository")
 -load("@build_bazel_rules_apple//apple:repositories.bzl", "apple_rules_dependencies")
  load("@com_github_aignas_rules_shellcheck//:deps.bzl", "shellcheck_dependencies")
 -load("@com_github_chrusty_protoc_gen_jsonschema//:deps.bzl", protoc_gen_jsonschema_go_dependencies = "go_dependencies")
  load("@com_google_cel_cpp//bazel:deps.bzl", "parser_deps")
 -load("@dev_pip3//:requirements.bzl", pip_dev_dependencies = "install_deps")
 -load("@emsdk//:emscripten_deps.bzl", "emscripten_deps")
 -load("@emsdk//:toolchains.bzl", "register_emscripten_toolchains")
  load("@envoy_toolshed//compile:sanitizer_libs.bzl", "setup_sanitizer_libs")
  load("@envoy_toolshed//coverage/grcov:grcov_repository.bzl", "grcov_repository")
 -load("@fuzzing_pip3//:requirements.bzl", pip_fuzzing_dependencies = "install_deps")
- load("@io_bazel_rules_go//go:deps.bzl", "go_download_sdk", "go_register_toolchains", "go_rules_dependencies")
+-load("@io_bazel_rules_go//go:deps.bzl", "go_download_sdk", "go_register_toolchains", "go_rules_dependencies")
 -load("@proxy_wasm_rust_sdk//bazel:dependencies.bzl", "proxy_wasm_rust_sdk_dependencies")
++load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")
  load("@rules_buf//buf:repositories.bzl", "rules_buf_toolchains")
  load("@rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")
  load("@rules_foreign_cc//foreign_cc:repositories.bzl", "rules_foreign_cc_dependencies")
  load("@rules_fuzzing//fuzzing:repositories.bzl", "rules_fuzzing_dependencies")
  load("@rules_pkg//:deps.bzl", "rules_pkg_dependencies")
  load("@rules_proto_grpc//:repositories.bzl", "rules_proto_grpc_toolchains")
 -load("@rules_rust//crate_universe:defs.bzl", "crates_repository")
 -load("@rules_rust//crate_universe:repositories.bzl", "crate_universe_dependencies")
 -load("@rules_rust//rust:defs.bzl", "rust_common")
 -load("@rules_rust//rust:repositories.bzl", "rules_rust_dependencies", "rust_register_toolchains", "rust_repository_set")
  
  # go version for rules_go
  GO_VERSION = "1.24.6"
-@@ -36,7 +23,6 @@ BUF_VERSION = "v1.56.0"
+ 
+ JQ_VERSION = "1.7"
+ YQ_VERSION = "4.24.4"
+ 
+ BUF_SHA = "5790beb45aaf51a6d7e68ca2255b22e1b14c9ae405a6c472cdcfc228c66abfc1"
+ BUF_VERSION = "v1.56.0"
+ 
  def envoy_dependency_imports(
          go_version = GO_VERSION,
          jq_version = JQ_VERSION,
 -        yq_version = YQ_VERSION,
          buf_sha = BUF_SHA,
          buf_version = BUF_VERSION):
      compatibility_proxy_repo()
-@@ -47,41 +33,14 @@ def envoy_dependency_imports(
+     rules_foreign_cc_dependencies(
+         register_default_tools = False,
+         register_built_tools = False,
+     )
      go_rules_dependencies()
-     go_register_toolchains(version = "host")
+-    go_register_toolchains(go_version)
+-    if go_version != "host":
+-        envoy_download_go_sdks(go_version)
++    go_register_toolchains(version = "host")
      gazelle_dependencies(go_sdk = "go_sdk")
 -    apple_rules_dependencies()
 -    pip_dependencies()
 -    pip_dev_dependencies()
 -    pip_fuzzing_dependencies()
      rules_pkg_dependencies()
 -    emscripten_deps(emscripten_version = "4.0.6")
 -    register_emscripten_toolchains()
 -
 -    rust_repository_set(
 -        name = "rust_linux_s390x",
 -        exec_triple = "s390x-unknown-linux-gnu",
 -        extra_target_triples = [
 -            "wasm32-unknown-unknown",
 -            "wasm32-wasi",
 -        ],
 -        versions = [rust_common.default_version],
 -    )
 -    rules_rust_dependencies()
 -    rust_register_toolchains(
 -        extra_target_triples = [
 -            "wasm32-unknown-unknown",
 -            "wasm32-wasi",
 -        ],
 -    )
 -    crate_universe_dependencies()
 -    crates_repositories()
      grcov_repository()
      shellcheck_dependencies()
 -    proxy_wasm_rust_sdk_dependencies()
      rules_fuzzing_dependencies(
 -        oss_fuzz = True,
 +        oss_fuzz = False,
          honggfuzz = False,
      )
      register_jq_toolchains(version = jq_version)
 -    register_yq_toolchains(version = yq_version)
      parser_deps()
  
      rules_buf_toolchains(
-@@ -168,9 +127,14 @@ def envoy_dependency_imports(
+         sha256 = buf_sha,
+         version = buf_version,
+     )
+ 
+     setup_sanitizer_libs()
+ 
+     # These dependencies, like most of the Go in this repository, exist only for the API.
+@@ -168,92 +126,63 @@
+         sum = "h1:B/lvg4tQ5hfFZd4V2hcSfFVfUvAK6GSFKxIIzwnkv8g=",
+         version = "v0.0.0-20220520190051-1e77728a1eaa",
+         build_external = "external",
+         build_directives = [
+             "gazelle:resolve go google.golang.org/genproto/googleapis/api/expr/v1alpha1 @org_golang_google_genproto_googleapis_api//expr/v1alpha1",
+         ],
+     )
      go_repository(
          name = "com_github_spf13_afero",
          importpath = "github.com/spf13/afero",
 -        sum = "h1:8q6vk3hthlpb2SouZcnBVKboxWQWMDNF38bwholZrJc=",
 -        version = "v1.3.4",
 +        sum = "h1:EaGW2JJh15aKOejeuJ+wpFSHnbd7GE6Wvp3TsNhb6LY=",
 +        version = "v1.10.0",
          build_external = "external",
-+        build_directives = [
-+            "gazelle:resolve go golang.org/x/text/runes @org_golang_x_text//runes",
-+            "gazelle:resolve go golang.org/x/text/transform @org_golang_x_text//transform",
-+            "gazelle:resolve go golang.org/x/text/unicode/norm @org_golang_x_text//unicode/norm",
-+        ],
          # project_url = "https://pkg.go.dev/github.com/spf13/afero",
          # last_update = "2021-03-20"
          # use_category = ["api"],
-@@ -179,9 +143,18 @@ def envoy_dependency_imports(
+         # source = "https://github.com/bufbuild/protoc-gen-validate/blob/v0.6.1/dependencies.bzl#L60-L65"
+         build_directives = [
+             "gazelle:resolve go golang.org/x/text/runes @org_golang_x_text//runes",
+             "gazelle:resolve go golang.org/x/text/transform @org_golang_x_text//transform",
+             "gazelle:resolve go golang.org/x/text/unicode/norm @org_golang_x_text//unicode/norm",
+         ],
+     )
      go_repository(
          name = "com_github_lyft_protoc_gen_star_v2",
          importpath = "github.com/lyft/protoc-gen-star/v2",
 -        sum = "h1:keaAo8hRuAT0O3DfJ/wM3rufbAjGeJ1lAtWZHDjKGB0=",
 -        version = "v2.0.1",
 +        sum = "h1:sIXJOMrYnQZJu7OB7ANSF4MYri2fTEGIsRLz6LwI4xE=",
 +        version = "v2.0.4-0.20230330145011-496ad1ac90a4",
          build_external = "external",
 +        build_file_generation = "on",
-+        build_directives = [
-+            "gazelle:resolve go github.com/spf13/afero @com_github_spf13_afero//:afero",
+         # project_url = "https://pkg.go.dev/github.com/lyft/protoc-gen-star",
+         # last_update = "2023-01-06"
+         # use_category = ["api"],
+         # source = "https://github.com/bufbuild/protoc-gen-validate/blob/v0.10.1/dependencies.bzl#L35-L40"
+         build_directives = [
+             "gazelle:resolve go github.com/spf13/afero @com_github_spf13_afero//:afero",
 +            "gazelle:resolve go google.golang.org/protobuf/proto @org_golang_google_protobuf//proto",
 +            "gazelle:resolve go google.golang.org/protobuf/runtime/protoimpl @org_golang_google_protobuf//runtime/protoimpl",
 +            "gazelle:resolve go google.golang.org/protobuf/types/descriptorpb @org_golang_google_protobuf//types/descriptorpb",
 +            "gazelle:resolve go google.golang.org/protobuf/types/pluginpb @org_golang_google_protobuf//types/pluginpb",
-+        ],
+         ],
 +        build_extra_args = ["-exclude=lang/go/goimports.go"],
-         # project_url = "https://pkg.go.dev/github.com/lyft/protoc-gen-star",
-         # last_update = "2023-01-06"
-         # use_category = ["api"],
-@@ -190,8 +163,8 @@ def envoy_dependency_imports(
+     )
      go_repository(
          name = "com_github_iancoleman_strcase",
          importpath = "github.com/iancoleman/strcase",
 -        sum = "h1:ux/56T2xqZO/3cP1I2F86qpeoYPCOzk+KF/UH/Ar+lk=",
 -        version = "v0.0.0-20180726023541-3605ed457bf7",
 +        sum = "h1:05I4QRnGpI0m37iZQRuskXh+w77mr6Z41lwQzuHLwW0=",
 +        version = "v0.2.0",
          build_external = "external",
          # project_url = "https://pkg.go.dev/github.com/iancoleman/strcase",
          # last_update = "2020-11-22"
-@@ -206,39 +179,5 @@ def envoy_dependency_imports(
+         # use_category = ["api"],
+         # source = "https://github.com/bufbuild/protoc-gen-validate/blob/v0.6.1/dependencies.bzl#L23-L28"
+     )
+     go_repository(
+         name = "com_github_planetscale_vtprotobuf",
+         importpath = "github.com/planetscale/vtprotobuf",
+         sum = "h1:ujRGEVWJEoaxQ+8+HMl8YEpGaDAgohgZxJ5S+d2TTFQ=",
+         version = "v0.6.1-0.20240409071808-615f978279ca",
          build_external = "external",
      )
  
 -    protoc_gen_jsonschema_go_dependencies()
      rules_proto_grpc_toolchains()
- 
+-
 -def envoy_download_go_sdks(go_version):
 -    go_download_sdk(
 -        name = "go_linux_amd64",
 -        goos = "linux",
 -        goarch = "amd64",
 -        version = go_version,
 -    )
 -    go_download_sdk(
 -        name = "go_linux_arm64",
 -        goos = "linux",
 -        goarch = "arm64",
 -        version = go_version,
 -    )
 -    go_download_sdk(
 -        name = "go_darwin_amd64",
 -        goos = "darwin",
 -        goarch = "amd64",
 -        version = go_version,
 -    )
 -    go_download_sdk(
 -        name = "go_darwin_arm64",
 -        goos = "darwin",
 -        goarch = "arm64",
 -        version = go_version,
 -    )
 -
 -def crates_repositories():
 -    crates_repository(
 -        name = "dynamic_modules_rust_sdk_crate_index",
 -        cargo_lockfile = "@envoy//source/extensions/dynamic_modules/sdk/rust:Cargo.lock",
 -        lockfile = Label("@envoy//source/extensions/dynamic_modules/sdk/rust:Cargo.Bazel.lock"),
 -        manifests = ["@envoy//source/extensions/dynamic_modules/sdk/rust:Cargo.toml"],
 -    )
diff --git a/www/pomerium-envoy-custom/files/patch-WORKSPACE b/www/pomerium-envoy-custom/files/patch-WORKSPACE
index 2fa04dda109c..2995ee90ffbb 100644
--- a/www/pomerium-envoy-custom/files/patch-WORKSPACE
+++ b/www/pomerium-envoy-custom/files/patch-WORKSPACE
@@ -1,92 +1,90 @@
---- WORKSPACE.orig	2026-03-16 21:25:50 UTC
+--- WORKSPACE.orig	2026-06-25 04:52:37 UTC
 +++ WORKSPACE
 @@ -2,31 +2,6 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "
  
  load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
  
 -# Hedron's Compile Commands Extractor for Bazel
 -# https://github.com/hedronvision/bazel-compile-commands-extractor
 -http_archive(
 -    name = "hedron_compile_commands",
 -    strip_prefix = "bazel-compile-commands-extractor-f5fbd4cee671d8d908f37c83abaf70fba5928fc7",
 -    url = "https://github.com/mikael-s-persson/bazel-compile-commands-extractor/archive/f5fbd4cee671d8d908f37c83abaf70fba5928fc7.tar.gz",
 -    sha256 = "ba3feefdf57b6d4c749e3c4abfa86f3673e7db364cb13acfc3496dce6ea801a3",
 -)
 -
 -load("@hedron_compile_commands//:workspace_setup.bzl", "hedron_compile_commands_setup")
 -
 -hedron_compile_commands_setup()
 -
 -load("@hedron_compile_commands//:workspace_setup_transitive.bzl", "hedron_compile_commands_setup_transitive")
 -
 -hedron_compile_commands_setup_transitive()
 -
 -load("@hedron_compile_commands//:workspace_setup_transitive_transitive.bzl", "hedron_compile_commands_setup_transitive_transitive")
 -
 -hedron_compile_commands_setup_transitive_transitive()
 -
 -load("@hedron_compile_commands//:workspace_setup_transitive_transitive_transitive.bzl", "hedron_compile_commands_setup_transitive_transitive_transitive")
 -
 -hedron_compile_commands_setup_transitive_transitive_transitive()
 -
- envoy_version = "41749943780b54b70b510b1b1a4805ae529e174a"
+ envoy_version = "ee7784f95f506e2a606ae668f0d9f70f9d26af83"
  
  openssh_version = "V_10_2_P1"
 @@ -57,6 +32,26 @@ http_archive(
          "//patches/envoy:0008-cel-cpp-compatibility.patch",
          "//patches/envoy:tmp-envoy-41815.patch",
          "//patches/envoy:tmp-transport-socket-options.patch",
 +        "//patches/envoy:freebsd-rules-foreign-cc.patch",
 +        "//patches/envoy:freebsd-dependency-imports.patch",
 +        "//patches/envoy:freebsd-envoy-cmake-generate-args.patch",
 +        "//patches/envoy:freebsd-go-sdk.patch",
 +        "//patches/envoy:freebsd-foreign-cc-ares.patch",
 +        "//patches/envoy:freebsd-foreign-cc-nghttp2.patch",
 +        "//patches/envoy:freebsd-foreign-cc-maxmind.patch",
 +        "//patches/envoy:freebsd-maxmind-extension.patch",
 +        "//patches/envoy:freebsd-foreign-cc-zlib.patch",
 +        "//patches/envoy:freebsd-foreign-cc-zstd.patch",
 +        "//patches/envoy:freebsd-foreign-cc-luajit.patch",
 +        "//patches/envoy:freebsd-luajit.patch",
 +        "//patches/envoy:freebsd-platform.patch",
 +        "//patches/envoy:freebsd-terminate-thread.patch",
 +        "//patches/envoy:freebsd-thread-impl.patch",
 +        "//patches/envoy:freebsd-address-impl.patch",
 +        "//patches/envoy:freebsd-io-socket-handle-impl-h.patch",
 +        "//patches/envoy:freebsd-io-socket-handle-impl-cc.patch",
 +        "//patches/envoy:freebsd-lz4-qat-removal.patch",
 +        "//patches/envoy:freebsd-inotify.patch",
      ],
-     sha256 = "26de1f5b0497a3b4dba9b6157fc555f3c9f4e1f21214462ebff5b19649304e9f",
+     sha256 = "6064371695a3cae6819f45407d275dc432ce59b95bb18071cfd2e981295baa80",
      strip_prefix = "envoy-" + envoy_version,
-@@ -87,9 +82,30 @@ envoy_python_dependencies()
+@@ -89,7 +84,28 @@ load("@envoy//bazel:dependency_imports.bzl", "envoy_de
  
- envoy_python_dependencies()
+ load("@envoy//bazel:dependency_imports.bzl", "envoy_dependency_imports")
  
 +# FreeBSD: Pre-register rules_proto 7.1.0 before envoy_dependency_imports() runs.
 +# rules_proto_grpc_toolchains() (called inside envoy_dependency_imports) would otherwise
 +# register rules_proto 5.3.0-21.7 first; external_http_archive then skips the 7.1.0
 +# registration from api/bazel/repositories.bzl because existing_rules() already contains
 +# "rules_proto".  rules_proto 5.3.0-21.7 lacks proto/proto_common.bzl which is required
 +# by io_bazel_rules_go/proto/compiler.bzl at BUILD loading time.
 +http_archive(
 +    name = "rules_proto",
 +    sha256 = "14a225870ab4e91869652cfd69ef2028277fc1dc4910d65d353b62d6e0ae21f4",
 +    strip_prefix = "rules_proto-7.1.0",
 +    url = "https://github.com/bazelbuild/rules_proto/archive/refs/tags/7.1.0.tar.gz",
 +)
 +
- load("@envoy//bazel:dependency_imports.bzl", "envoy_dependency_imports")
- 
  envoy_dependency_imports()
 +
 +# FreeBSD: Register @local_jdk compile toolchains before DEFAULT.WORKSPACE.SUFFIX
 +# adds the remote JDK toolchains. The @local_jdk toolchains have
 +# exec_compatible_with = HOST_CONSTRAINTS (FreeBSD) and use local_jdk as runtime
 +# (not remotejdk_21), avoiding toolchain resolution failures on FreeBSD.
 +# The @local_jdk repo is set up by jdk.WORKSPACE in DEFAULT.WORKSPACE.SUFFIX;
 +# register_toolchains here is lazy and resolves during build analysis.
 +register_toolchains("@local_jdk//:all")
  
  load("@envoy_api//bazel:envoy_http_archive.bzl", "envoy_http_archive")
  
diff --git a/www/pomerium/Makefile b/www/pomerium/Makefile
index 3afa87c12515..6a76ec37bd7b 100644
--- a/www/pomerium/Makefile
+++ b/www/pomerium/Makefile
@@ -1,421 +1,420 @@
 PORTNAME=	pomerium
 DISTVERSIONPREFIX=	v
-DISTVERSION=	0.32.7
-PORTREVISION=	2
+DISTVERSION=	0.32.9
 PORTEPOCH=	1
 CATEGORIES=	www
 
 MAINTAINER=	delphij@FreeBSD.org
 COMMENT=	Identity-aware access proxy
 WWW=		https://pomerium.io/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/libexec/pomerium-envoy:www/pomerium-envoy-custom
 
 USES=		cpe go:modules,1.25
 GO_TARGET=	./cmd/${PORTNAME}:${PREFIX}/libexec/${PORTNAME}
 
 GO_PKGNAME=	github.com/${GH_ACCOUNT}/${PORTNAME}
 GO_BUILDFLAGS=	-ldflags "${STRIP} -w \
 		-X github.com/pomerium/pomerium/internal/version.Version=${DISTVERSIONPREFIX}${DISTVERSION} \
 		-X github.com/pomerium/pomerium/internal/version.ProjectName=${PORTNAME} \
 		-X github.com/pomerium/pomerium/internal/version.ProjectURL=https://pomerium.com"
 CGO_ENABLED=	0
 
 USE_RC_SUBR=	${PORTNAME}
 
 USE_GITHUB=	yes
 
 # Custom distfiles for packages not on GitHub
 MASTER_SITES+=	https://git.sr.ht/~shabbyrobe/gocovmerge/archive/:shabbyrobe \
 		https://proxy.golang.org/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/@v/:bufbsr
 
 DISTFILES+=	fa4f82cfbf4d.tar.gz:shabbyrobe \
 		v1.36.11-20251209175733-2a1774d88802.1.zip:bufbsr
 
 # The BSR zip must be extracted manually; exclude it from auto-extraction
 # to avoid the framework trying to use tar on a zip file.
 EXTRACT_ONLY=	${DISTFILES:N*.zip\:bufbsr:C/:.*//}
 
 EXTRACT_DEPENDS+=	${LOCALBASE}/bin/unzip:archivers/unzip
 
 GH_TUPLE=	\
 		Azure:go-ansiterm:faa5f7b0171c:azure_go_ansiterm/vendor/github.com/Azure/go-ansiterm \
 		CAFxX:httpcompression:v0.0.9:cafxx_httpcompression/vendor/github.com/CAFxX/httpcompression \
 		DataDog:zstd:v1.5.7:datadog_zstd/vendor/github.com/DataDog/zstd \
 		FiloSottile:bigmod:v0.0.3:filosottile_bigmod/vendor/filippo.io/bigmod \
 		FiloSottile:csrf:v0.2.1:filosottile_csrf/vendor/filippo.io/csrf \
 		FiloSottile:keygen:790df0a991a0:filosottile_keygen/vendor/filippo.io/keygen \
 		GoogleCloudPlatform:opentelemetry-operations-go:v0.54.0:googlecloudplatform_opentelemetry_operations_go/vendor/github.com/GoogleCloudPlatform/opentelemetry-operations-go \
-		GoogleCloudPlatform:opentelemetry-operations-go:detectors/gcp/v1.30.0:googlecloudplatform_opentelemetry_operations_go_gcp \
+		GoogleCloudPlatform:opentelemetry-operations-go:detectors/gcp/v1.31.0:googlecloudplatform_opentelemetry_operations_go_gcp \
 		Masterminds:semver:v3.4.0:masterminds_semver_v3/vendor/github.com/Masterminds/semver/v3 \
 		Microsoft:go-winio:v0.6.2:microsoft_go_winio/vendor/github.com/Microsoft/go-winio \
 		RaduBerinde:axisds:5135a0650657:raduberinde_axisds/vendor/github.com/RaduBerinde/axisds \
 		RaduBerinde:btreemap:3d62b7205d54:raduberinde_btreemap/vendor/github.com/RaduBerinde/btreemap \
 		VictoriaMetrics:fastcache:v1.13.2:victoriametrics_fastcache/vendor/github.com/VictoriaMetrics/fastcache \
 		agnivade:levenshtein:v1.2.1:agnivade_levenshtein/vendor/github.com/agnivade/levenshtein \
 		andybalholm:brotli:v1.0.5:andybalholm_brotli/vendor/github.com/andybalholm/brotli \
 		antlr4-go:antlr:v4.13.1:antlr4_go_antlr_v4/vendor/github.com/antlr4-go/antlr/v4 \
 		apapsch:go-jsonmerge:v2.0.0:apapsch_go_jsonmerge_v2/vendor/github.com/apapsch/go-jsonmerge/v2 \
 		armon:go-metrics:v0.4.1:armon_go_metrics/vendor/github.com/armon/go-metrics \
 		atotto:clipboard:v0.1.4:atotto_clipboard/vendor/github.com/atotto/clipboard \
 		aws:aws-sdk-go-v2:v1.41.0:aws_aws_sdk_go_v2/vendor/github.com/aws/aws-sdk-go-v2 \
 		aws:smithy-go:v1.24.0:aws_smithy_go/vendor/github.com/aws/smithy-go \
 		aymanbagabas:go-osc52:v2.0.1:aymanbagabas_go_osc52_v2/vendor/github.com/aymanbagabas/go-osc52/v2 \
 		beorn7:perks:v1.0.1:beorn7_perks/vendor/github.com/beorn7/perks \
 		bits-and-blooms:bitset:v1.24.4:bits_and_blooms_bitset/vendor/github.com/bits-and-blooms/bitset \
 		bufbuild:protovalidate-go:v1.1.0:bufbuild_protovalidate_go/vendor/buf.build/go/protovalidate \
 		caddyserver:certmagic:v0.25.1:caddyserver_certmagic/vendor/github.com/caddyserver/certmagic \
 		caddyserver:zerossl:v0.1.4:caddyserver_zerossl/vendor/github.com/caddyserver/zerossl \
 		ccoveille:go-safecast:v1.8.2:ccoveille_go_safecast/vendor/github.com/ccoveille/go-safecast \
 		cenkalti:backoff:v4.3.0:cenkalti_backoff_v4/vendor/github.com/cenkalti/backoff/v4 \
 		cenkalti:backoff:v5.0.3:cenkalti_backoff_v5/vendor/github.com/cenkalti/backoff/v5 \
 		census-ecosystem:opencensus-go-exporter-prometheus:v0.4.2:census_ecosystem_opencensus_go_exporter_prometheus/vendor/contrib.go.opencensus.io/exporter/prometheus \
 		census-instrumentation:opencensus-go:v0.24.0:census_instrumentation_opencensus_go/vendor/go.opencensus.io \
 		cespare:xxhash:v2.3.0:cespare_xxhash_v2/vendor/github.com/cespare/xxhash/v2 \
 		charmbracelet:bubbles:v2.0.0-rc.1:charmbracelet_bubbles/vendor/charm.land/bubbles/v2 \
 		charmbracelet:bubbletea:v2.0.0-rc.2:charmbracelet_bubbletea/vendor/charm.land/bubbletea/v2 \
 		charmbracelet:colorprofile:v0.4.1:charmbracelet_colorprofile/vendor/github.com/charmbracelet/colorprofile \
 		charmbracelet:lipgloss:4b304240aab7:charmbracelet_lipgloss/vendor/charm.land/lipgloss/v2 \
 		charmbracelet:ultraviolet:377898bcce38:charmbracelet_ultraviolet/vendor/github.com/charmbracelet/ultraviolet \
 		charmbracelet:x:ansi/v0.11.3:charmbracelet_x_ansi \
 		charmbracelet:x:term/v0.2.2:charmbracelet_x_term/vendor/github.com/charmbracelet/x \
 		charmbracelet:x:termios/v0.1.1:charmbracelet_x_termios \
 		charmbracelet:x:windows/v0.2.2:charmbracelet_x_windows \
 		clipperhouse:displaywidth:v0.6.1:clipperhouse_displaywidth/vendor/github.com/clipperhouse/displaywidth \
 		clipperhouse:stringish:v0.1.1:clipperhouse_stringish/vendor/github.com/clipperhouse/stringish \
 		clipperhouse:uax29:v2.3.0:clipperhouse_uax29_v2/vendor/github.com/clipperhouse/uax29/v2 \
 		cloudflare:circl:v1.6.3:cloudflare_circl/vendor/github.com/cloudflare/circl \
 		cncf:xds:ee656c7534f5:cncf_xds_go \
 		cockroachdb:crlib:1264a2edc35b:cockroachdb_crlib/vendor/github.com/cockroachdb/crlib \
 		cockroachdb:errors:v1.11.3:cockroachdb_errors/vendor/github.com/cockroachdb/errors \
 		cockroachdb:logtags:21c54148d20b:cockroachdb_logtags/vendor/github.com/cockroachdb/logtags \
 		cockroachdb:pebble:v2.1.3:cockroachdb_pebble_v2/vendor/github.com/cockroachdb/pebble/v2 \
 		cockroachdb:redact:v1.1.5:cockroachdb_redact/vendor/github.com/cockroachdb/redact \
 		cockroachdb:swiss:b0f6560f979b:cockroachdb_swiss/vendor/github.com/cockroachdb/swiss \
 		cockroachdb:tokenbucket:cc333fc44b06:cockroachdb_tokenbucket/vendor/github.com/cockroachdb/tokenbucket \
 		containerd:errdefs:v0.3.0:containerd_errdefs_pkg/vendor/github.com/containerd/errdefs \
 		containerd:errdefs:v1.0.0:containerd_errdefs \
 		containerd:log:v0.1.0:containerd_log/vendor/github.com/containerd/log \
 		containerd:platforms:v1.0.0-rc.2:containerd_platforms/vendor/github.com/containerd/platforms \
 		coreos:go-oidc:v3.17.0:coreos_go_oidc_v3/vendor/github.com/coreos/go-oidc/v3 \
 		cpuguy83:dockercfg:v0.3.2:cpuguy83_dockercfg/vendor/github.com/cpuguy83/dockercfg \
 		davecgh:go-spew:d8f796af33cc:davecgh_go_spew/vendor/github.com/davecgh/go-spew \
 		decred:dcrd:dcrec/secp256k1/v4.4.0:decred_dcrd_v4 \
 		distribution:reference:v0.6.0:distribution_reference/vendor/github.com/distribution/reference \
 		docker:go-connections:v0.6.0:docker_go_connections/vendor/github.com/docker/go-connections \
 		docker:go-units:v0.5.0:docker_go_units/vendor/github.com/docker/go-units \
 		ebitengine:purego:v0.8.4:ebitengine_purego/vendor/github.com/ebitengine/purego \
 		envoyproxy:go-control-plane:envoy/v1.36.0:envoyproxy_go_control_plane/vendor/github.com/envoyproxy/go-control-plane \
 		envoyproxy:protoc-gen-validate:v1.3.0:envoyproxy_protoc_gen_validate/vendor/github.com/envoyproxy/protoc-gen-validate \
-		exaring:otelpgx:v0.9.4:exaring_otelpgx/vendor/github.com/exaring/otelpgx \
+		exaring:otelpgx:v0.10.0:exaring_otelpgx/vendor/github.com/exaring/otelpgx \
 		fatih:color:v1.18.0:fatih_color/vendor/github.com/fatih/color \
 		felixge:httpsnoop:v1.0.4:felixge_httpsnoop/vendor/github.com/felixge/httpsnoop \
 		fsnotify:fsnotify:v1.9.0:fsnotify_fsnotify/vendor/github.com/fsnotify/fsnotify \
 		fxamacker:cbor:v2.9.0:fxamacker_cbor_v2/vendor/github.com/fxamacker/cbor/v2 \
 		gaissmai:bart:v0.26.0:gaissmai_bart/vendor/github.com/gaissmai/bart \
 		getsentry:sentry-go:v0.27.0:getsentry_sentry_go/vendor/github.com/getsentry/sentry-go \
 		go-chi:chi:v5.2.3:go_chi_chi_v5/vendor/github.com/go-chi/chi/v5 \
 		go-ini:ini:v1.67.0:go_ini_ini/vendor/github.com/go-ini/ini \
-		go-jose:go-jose:v3.0.4:go_jose_go_jose_v3/vendor/github.com/go-jose/go-jose/v3 \
-		go-jose:go-jose:v4.1.3:go_jose_go_jose_v4/vendor/github.com/go-jose/go-jose/v4 \
+		go-jose:go-jose:v3.0.5:go_jose_go_jose_v3/vendor/github.com/go-jose/go-jose/v3 \
+		go-jose:go-jose:v4.1.4:go_jose_go_jose_v4/vendor/github.com/go-jose/go-jose/v4 \
 		go-kit:log:v0.2.1:go_kit_log/vendor/github.com/go-kit/log \
 		go-logfmt:logfmt:v0.6.0:go_logfmt_logfmt/vendor/github.com/go-logfmt/logfmt \
 		go-logr:logr:v1.4.3:go_logr_logr/vendor/github.com/go-logr/logr \
 		go-logr:stdr:v1.2.2:go_logr_stdr/vendor/github.com/go-logr/stdr \
 		go-ole:go-ole:v1.3.0:go_ole_go_ole/vendor/github.com/go-ole/go-ole \
 		go-viper:mapstructure:v2.4.0:go_viper_mapstructure_v2/vendor/github.com/go-viper/mapstructure/v2 \
 		go-yaml:yaml:v2.4.0:go_yaml_yaml/vendor/gopkg.in/yaml.v2 \
 		go-yaml:yaml:v3.0.1:go_yaml_yaml_v3/vendor/gopkg.in/yaml.v3 \
 		gobwas:glob:v0.2.3:gobwas_glob/vendor/github.com/gobwas/glob \
 		goccy:go-json:v0.10.5:goccy_go_json/vendor/github.com/goccy/go-json \
 		gogo:protobuf:v1.3.2:gogo_protobuf/vendor/github.com/gogo/protobuf \
-		golang:crypto:v0.47.0:golang_crypto/vendor/golang.org/x/crypto \
+		golang:crypto:v0.52.0:golang_crypto/vendor/golang.org/x/crypto \
 		golang:exp:944ab1f22d93:golang_exp/vendor/golang.org/x/exp \
 		golang:groupcache:2c02b8208cf8:golang_groupcache/vendor/github.com/golang/groupcache \
-		golang:mod:v0.32.0:golang_mod/vendor/golang.org/x/mod \
-		golang:net:v0.49.0:golang_net/vendor/golang.org/x/net \
-		golang:oauth2:v0.34.0:golang_oauth2/vendor/golang.org/x/oauth2 \
+		golang:mod:v0.36.0:golang_mod/vendor/golang.org/x/mod \
+		golang:net:v0.55.0:golang_net/vendor/golang.org/x/net \
+		golang:oauth2:v0.35.0:golang_oauth2/vendor/golang.org/x/oauth2 \
 		golang:snappy:v1.0.0:golang_snappy/vendor/github.com/golang/snappy \
-		golang:sync:v0.19.0:golang_sync/vendor/golang.org/x/sync \
-		golang:sys:v0.40.0:golang_sys/vendor/golang.org/x/sys \
-		golang:term:v0.39.0:golang_term/vendor/golang.org/x/term \
-		golang:text:v0.33.0:golang_text/vendor/golang.org/x/text \
+		golang:sync:v0.21.0:golang_sync/vendor/golang.org/x/sync \
+		golang:sys:v0.46.0:golang_sys/vendor/golang.org/x/sys \
+		golang:term:v0.44.0:golang_term/vendor/golang.org/x/term \
+		golang:text:v0.38.0:golang_text/vendor/golang.org/x/text \
 		golang:time:v0.14.0:golang_time/vendor/golang.org/x/time \
-		golang:tools:v0.41.0:golang_tools/vendor/golang.org/x/tools \
+		golang:tools:v0.45.0:golang_tools/vendor/golang.org/x/tools \
 		google:btree:v1.1.3:google_btree/vendor/github.com/google/btree \
 		google:cel-go:v0.26.1:google_cel_go/vendor/github.com/google/cel-go \
 		google:cel-spec:v0.25.1:google_cel_spec/vendor/cel.dev/expr \
 		google:go-cmp:v0.7.0:google_go_cmp/vendor/github.com/google/go-cmp \
 		google:go-genproto:9219d122eba9:google_go_genproto/vendor/google.golang.org/genproto \
-		google:go-genproto:0a764e51fe1b:google_go_genproto_api/vendor/google.golang.org/genproto/googleapis/api \
-		google:go-genproto:97cd9d5aeac2:google_go_genproto_rpc/vendor/google.golang.org/genproto/googleapis/rpc \
+		google:go-genproto:9d38bb4040a9:google_go_genproto_api/vendor/google.golang.org/genproto/googleapis/api \
+		google:go-genproto:6f92a3bedf2d:google_go_genproto_rpc/vendor/google.golang.org/genproto/googleapis/rpc \
 		google:go-jsonnet:v0.21.0:google_go_jsonnet/vendor/github.com/google/go-jsonnet \
 		google:go-tpm:v0.9.8:google_go_tpm/vendor/github.com/google/go-tpm \
 		google:jsonschema-go:v0.4.2:google_jsonschema_go/vendor/github.com/google/jsonschema-go \
 		google:s2a-go:v0.1.9:google_s2a_go/vendor/github.com/google/s2a-go \
 		google:uuid:v1.6.0:google_uuid/vendor/github.com/google/uuid \
 		googleapis:enterprise-certificate-proxy:v0.3.7:googleapis_enterprise_certificate_proxy/vendor/github.com/googleapis/enterprise-certificate-proxy \
 		googleapis:gax-go:v2.15.0:googleapis_gax_go_v2 \
 		googleapis:google-api-go-client:v0.258.0:googleapis_google_api_go_client/vendor/google.golang.org/api \
 		googleapis:google-cloud-go:v0.123.0:googleapis_google_cloud_go/vendor/cloud.google.com/go \
 		googleapis:google-cloud-go:auth/v0.17.0:googleapis_google_cloud_go_auth \
 		googleapis:google-cloud-go:auth/oauth2adapt/v0.2.8:googleapis_google_cloud_go_oauth2adapt \
 		googleapis:google-cloud-go:compute/metadata/v0.9.0:googleapis_google_cloud_go_metadata \
 		googleapis:google-cloud-go:iam/v1.5.3:googleapis_google_cloud_go_iam \
 		googleapis:google-cloud-go:monitoring/v1.24.2:googleapis_google_cloud_go_monitoring \
 		googleapis:google-cloud-go:storage/v1.58.0:googleapis_google_cloud_go_storage \
 		gorilla:mux:v1.8.1:gorilla_mux/vendor/github.com/gorilla/mux \
 		gorilla:securecookie:v1.1.2:gorilla_securecookie/vendor/github.com/gorilla/securecookie \
 		gorilla:websocket:e064f32e3674:gorilla_websocket/vendor/github.com/gorilla/websocket \
 		gregjones:httpcache:901d90724c79:gregjones_httpcache/vendor/github.com/gregjones/httpcache \
 		grpc-ecosystem:go-grpc-middleware:v2.3.3:grpc_ecosystem_go_grpc_middleware_v2/vendor/github.com/grpc-ecosystem/go-grpc-middleware/v2 \
-		grpc-ecosystem:grpc-gateway:v2.27.3:grpc_ecosystem_grpc_gateway_v2/vendor/github.com/grpc-ecosystem/grpc-gateway/v2 \
-		grpc:grpc-go:v1.79.3:grpc_grpc_go/vendor/google.golang.org/grpc \
+		grpc-ecosystem:grpc-gateway:v2.28.0:grpc_ecosystem_grpc_gateway_v2/vendor/github.com/grpc-ecosystem/grpc-gateway/v2 \
+		grpc:grpc-go:v1.80.0:grpc_grpc_go/vendor/google.golang.org/grpc \
 		hashicorp:errwrap:v1.1.0:hashicorp_errwrap/vendor/github.com/hashicorp/errwrap \
 		hashicorp:go-hclog:v1.6.2:hashicorp_go_hclog/vendor/github.com/hashicorp/go-hclog \
 		hashicorp:go-immutable-radix:v1.0.0:hashicorp_go_immutable_radix/vendor/github.com/hashicorp/go-immutable-radix \
 		hashicorp:go-metrics:v0.5.4:hashicorp_go_metrics/vendor/github.com/hashicorp/go-metrics \
 		hashicorp:go-msgpack:v2.1.2:hashicorp_go_msgpack_v2/vendor/github.com/hashicorp/go-msgpack/v2 \
 		hashicorp:go-multierror:v1.1.1:hashicorp_go_multierror/vendor/github.com/hashicorp/go-multierror \
 		hashicorp:go-set:v3.0.1:hashicorp_go_set_v3/vendor/github.com/hashicorp/go-set/v3 \
 		hashicorp:golang-lru:v0.5.1:hashicorp_golang_lru/vendor/github.com/hashicorp/golang-lru \
 		hashicorp:golang-lru:v2.0.7:hashicorp_golang_lru_v2/vendor/github.com/hashicorp/golang-lru/v2 \
 		hashicorp:raft:v1.7.3:hashicorp_raft/vendor/github.com/hashicorp/raft \
 		imdario:mergo:v1.0.2:imdario_mergo/vendor/dario.cat/mergo \
 		inconshreveable:mousetrap:v1.1.0:inconshreveable_mousetrap/vendor/github.com/inconshreveable/mousetrap \
 		jackc:pgpassfile:v1.0.0:jackc_pgpassfile/vendor/github.com/jackc/pgpassfile \
 		jackc:pgservicefile:5a60cdf6a761:jackc_pgservicefile/vendor/github.com/jackc/pgservicefile \
 		jackc:pgx:v5.9.2:jackc_pgx_v5/vendor/github.com/jackc/pgx/v5 \
 		jackc:puddle:v2.2.2:jackc_puddle_v2/vendor/github.com/jackc/puddle/v2 \
 		johannesboyne:gofakes3:ebf3e50324d3:johannesboyne_gofakes3/vendor/github.com/johannesboyne/gofakes3 \
 		jxskiss:base62:v1.1.0:jxskiss_base62/vendor/github.com/jxskiss/base62 \
 		klauspost:compress:v1.18.2:klauspost_compress/vendor/github.com/klauspost/compress \
 		klauspost:cpuid:v2.3.0:klauspost_cpuid_v2/vendor/github.com/klauspost/cpuid/v2 \
 		kr:pretty:v0.3.1:kr_pretty/vendor/github.com/kr/pretty \
 		kr:text:v0.2.0:kr_text/vendor/github.com/kr/text \
 		kralicky:go-adaptive-radix-tree:330eb762e74c:kralicky_go_adaptive_radix_tree/vendor/github.com/kralicky/go-adaptive-radix-tree \
 		kubernetes-sigs:yaml:v1.6.0:kubernetes_sigs_yaml/vendor/sigs.k8s.io/yaml \
 		lestrrat-go:blackmagic:v1.0.4:lestrrat_go_blackmagic/vendor/github.com/lestrrat-go/blackmagic \
 		lestrrat-go:dsig-secp256k1:v1.0.0:lestrrat_go_dsig_secp256k1/vendor/github.com/lestrrat-go/dsig-secp256k1 \
 		lestrrat-go:dsig:v1.0.0:lestrrat_go_dsig/vendor/github.com/lestrrat-go/dsig \
 		lestrrat-go:httpcc:v1.0.1:lestrrat_go_httpcc/vendor/github.com/lestrrat-go/httpcc \
 		lestrrat-go:httprc:v3.0.1:lestrrat_go_httprc_v3/vendor/github.com/lestrrat-go/httprc/v3 \
 		lestrrat-go:jwx:v3.0.12:lestrrat_go_jwx_v3/vendor/github.com/lestrrat-go/jwx/v3 \
 		lestrrat-go:option:v1.0.1:lestrrat_go_option/vendor/github.com/lestrrat-go/option \
 		lestrrat-go:option:v2.0.0:lestrrat_go_option_v2/vendor/github.com/lestrrat-go/option/v2 \
 		libdns:libdns:v1.1.1:libdns_libdns/vendor/github.com/libdns/libdns \
 		libp2p:go-reuseport:v0.4.0:libp2p_go_reuseport/vendor/github.com/libp2p/go-reuseport \
 		lucasb-eyer:go-colorful:v1.3.0:lucasb_eyer_go_colorful/vendor/github.com/lucasb-eyer/go-colorful \
 		lufia:plan9stats:fba389f38bae:lufia_plan9stats/vendor/github.com/lufia/plan9stats \
 		magiconair:properties:v1.8.10:magiconair_properties/vendor/github.com/magiconair/properties \
 		martinlindhe:base36:v1.1.1:martinlindhe_base36/vendor/github.com/martinlindhe/base36 \
 		mattn:go-colorable:v0.1.14:mattn_go_colorable/vendor/github.com/mattn/go-colorable \
 		mattn:go-isatty:v0.0.20:mattn_go_isatty/vendor/github.com/mattn/go-isatty \
 		mattn:go-runewidth:v0.0.19:mattn_go_runewidth/vendor/github.com/mattn/go-runewidth \
 		mholt:acmez:v3.1.4:mholt_acmez_v3/vendor/github.com/mholt/acmez/v3 \
 		miekg:dns:v1.1.69:miekg_dns/vendor/github.com/miekg/dns \
 		minio:minlz:87eb42fe8882:minio_minlz/vendor/github.com/minio/minlz \
 		mitchellh:hashstructure:v2.0.2:mitchellh_hashstructure_v2/vendor/github.com/mitchellh/hashstructure/v2 \
 		moby:docker-image-spec:v1.3.1:moby_docker_image_spec/vendor/github.com/moby/docker-image-spec \
 		moby:go-archive:v0.1.0:moby_go_archive/vendor/github.com/moby/go-archive \
 		moby:moby:v28.5.2:moby_moby/vendor/github.com/docker/docker \
 		moby:patternmatcher:v0.6.0:moby_patternmatcher/vendor/github.com/moby/patternmatcher \
 		moby:sys:user/v0.4.0:moby_sys_user/vendor/github.com/moby/sys \
 		moby:sys:sequential/v0.6.0:moby_sys_sequential \
 		moby:sys:userns/v0.1.0:moby_sys_userns \
 		moby:term:v0.5.2:moby_term/vendor/github.com/moby/term \
 		modelcontextprotocol:go-sdk:v1.4.1:modelcontextprotocol_go_sdk/vendor/github.com/modelcontextprotocol/go-sdk \
 		morikuni:aec:v1.1.0:morikuni_aec/vendor/github.com/morikuni/aec \
 		muesli:cancelreader:v0.2.2:muesli_cancelreader/vendor/github.com/muesli/cancelreader \
 		muesli:termenv:v0.16.0:muesli_termenv/vendor/github.com/muesli/termenv \
 		munnerz:goautoneg:a7dc8b61c822:munnerz_goautoneg/vendor/github.com/munnerz/goautoneg \
 		natefinch:atomic:v1.0.1:natefinch_atomic/vendor/github.com/natefinch/atomic \
 		oapi-codegen:runtime:v1.1.2:oapi_codegen_runtime/vendor/github.com/oapi-codegen/runtime \
 		onsi:ginkgo:v1.16.5:onsi_ginkgo/vendor/github.com/onsi/ginkgo \
 		open-policy-agent:opa:v1.12.1:open_policy_agent_opa/vendor/github.com/open-policy-agent/opa \
 		open-telemetry:opentelemetry-go-contrib:detectors/gcp/v1.39.0:open_telemetry_opentelemetry_go_contrib/vendor/go.opentelemetry.io/contrib \
-		open-telemetry:opentelemetry-go-contrib:instrumentation/google.golang.org/grpc/otelgrpc/v0.64.0:open_telemetry_opentelemetry_go_contrib_1 \
-		open-telemetry:opentelemetry-go-contrib:instrumentation/net/http/otelhttp/v0.64.0:open_telemetry_opentelemetry_go_contrib_2 \
-		open-telemetry:opentelemetry-go-contrib:propagators/autoprop/v0.64.0:open_telemetry_opentelemetry_go_contrib_3 \
+		open-telemetry:opentelemetry-go-contrib:instrumentation/google.golang.org/grpc/otelgrpc/v0.68.0:open_telemetry_opentelemetry_go_contrib_1 \
+		open-telemetry:opentelemetry-go-contrib:instrumentation/net/http/otelhttp/v0.68.0:open_telemetry_opentelemetry_go_contrib_2 \
+		open-telemetry:opentelemetry-go-contrib:propagators/autoprop/v0.68.0:open_telemetry_opentelemetry_go_contrib_3 \
 		open-telemetry:opentelemetry-go-instrumentation:sdk/v1.2.1:open_telemetry_opentelemetry_go_instrumentation \
-		open-telemetry:opentelemetry-go:v1.40.0:open_telemetry_opentelemetry_go/vendor/go.opentelemetry.io/otel \
-		open-telemetry:opentelemetry-proto-go:v1.9.0:open_telemetry_opentelemetry_proto_go \
+		open-telemetry:opentelemetry-go:v1.43.0:open_telemetry_opentelemetry_go/vendor/go.opentelemetry.io/otel \
+		open-telemetry:opentelemetry-proto-go:v1.10.0:open_telemetry_opentelemetry_proto_go \
 		opencontainers:go-digest:v1.0.0:opencontainers_go_digest/vendor/github.com/opencontainers/go-digest \
 		opencontainers:image-spec:v1.1.1:opencontainers_image_spec/vendor/github.com/opencontainers/image-spec \
 		pelletier:go-toml:v2.2.4:pelletier_go_toml_v2/vendor/github.com/pelletier/go-toml/v2 \
 		peterbourgon:ff:v3.4.0:peterbourgon_ff_v3/vendor/github.com/peterbourgon/ff/v3 \
 		pierrec:lz4:v4.1.21:pierrec_lz4_v4/vendor/github.com/pierrec/lz4/v4 \
 		pires:go-proxyproto:v0.8.1:pires_go_proxyproto/vendor/github.com/pires/go-proxyproto \
 		pkg:errors:v0.9.1:pkg_errors/vendor/github.com/pkg/errors \
 		planetscale:vtprotobuf:0393e58bdf10:planetscale_vtprotobuf/vendor/github.com/planetscale/vtprotobuf \
 		pmezard:go-difflib:5d4384ee4fb2:pmezard_go_difflib/vendor/github.com/pmezard/go-difflib \
 		pomerium:datasource:1f58110d0e17:pomerium_datasource/vendor/github.com/pomerium/datasource \
-		pomerium:envoy-custom:v1.36.5-p1:pomerium_envoy_custom/vendor/github.com/pomerium/envoy-custom \
+		pomerium:envoy-custom:v1.36.8-p1:pomerium_envoy_custom/vendor/github.com/pomerium/envoy-custom \
 		pomerium:protoutil:19d2ae5b7518:pomerium_protoutil/vendor/github.com/pomerium/protoutil \
 		pomerium:webauthn:d32e028c3f7e:pomerium_webauthn/vendor/github.com/pomerium/webauthn \
 		power-devops:perfstat:82ca36839d55:power_devops_perfstat/vendor/github.com/power-devops/perfstat \
 		prometheus:client_golang:v1.23.2:prometheus_client_golang/vendor/github.com/prometheus/client_golang \
 		prometheus:client_model:v0.6.2:prometheus_client_model/vendor/github.com/prometheus/client_model \
 		prometheus:common:v0.67.5:prometheus_common/vendor/github.com/prometheus/common \
 		prometheus:otlptranslator:v1.0.0:prometheus_otlptranslator/vendor/github.com/prometheus/otlptranslator \
-		prometheus:procfs:v0.19.2:prometheus_procfs/vendor/github.com/prometheus/procfs \
+		prometheus:procfs:v0.20.1:prometheus_procfs/vendor/github.com/prometheus/procfs \
 		prometheus:statsd_exporter:v0.22.7:prometheus_statsd_exporter/vendor/github.com/prometheus/statsd_exporter \
 		protocolbuffers:protobuf-go:v1.36.11:protocolbuffers_protobuf_go/vendor/google.golang.org/protobuf \
 		quic-go:qpack:v0.6.0:quic_go_qpack/vendor/github.com/quic-go/qpack \
 		quic-go:quic-go:v0.58.0:quic_go_quic_go/vendor/github.com/quic-go/quic-go \
 		rcrowley:go-metrics:65e299d6c5c9:rcrowley_go_metrics/vendor/github.com/rcrowley/go-metrics \
 		rivo:uniseg:v0.4.7:rivo_uniseg/vendor/github.com/rivo/uniseg \
 		rogpeppe:go-internal:v1.14.1:rogpeppe_go_internal/vendor/github.com/rogpeppe/go-internal \
 		rs:cors:v1.11.1:rs_cors/vendor/github.com/rs/cors \
 		rs:zerolog:v1.34.0:rs_zerolog/vendor/github.com/rs/zerolog \
 		ryszard:goskiplist:2dfbae5fcf46:ryszard_goskiplist/vendor/github.com/ryszard/goskiplist \
 		sagikazarmark:locafero:v0.11.0:sagikazarmark_locafero/vendor/github.com/sagikazarmark/locafero \
 		sahilm:fuzzy:v0.1.1:sahilm_fuzzy/vendor/github.com/sahilm/fuzzy \
 		segmentio:asm:v1.2.1:segmentio_asm/vendor/github.com/segmentio/asm \
 		segmentio:encoding:v0.5.4:segmentio_encoding/vendor/github.com/segmentio/encoding \
 		shirou:gopsutil:v3.24.5:shirou_gopsutil_v3/vendor/github.com/shirou/gopsutil/v3 \
 		shirou:gopsutil:v4.25.6:shirou_gopsutil_v4/vendor/github.com/shirou/gopsutil/v4 \
 		shoenig:go-m1cpu:v0.1.6:shoenig_go_m1cpu/vendor/github.com/shoenig/go-m1cpu \
 		shogo82148:go-sfv:v0.3.3:shogo82148_go_sfv/vendor/github.com/shogo82148/go-sfv \
 		sirupsen:logrus:dd1b4c2e81af:sirupsen_logrus/vendor/github.com/sirupsen/logrus \
 		sourcegraph:conc:5f936abd7ae8:sourcegraph_conc/vendor/github.com/sourcegraph/conc \
 		spf13:afero:v1.15.0:spf13_afero/vendor/github.com/spf13/afero \
 		spf13:cast:v1.10.0:spf13_cast/vendor/github.com/spf13/cast \
 		spf13:cobra:v1.10.2:spf13_cobra/vendor/github.com/spf13/cobra \
 		spf13:pflag:v1.0.10:spf13_pflag/vendor/github.com/spf13/pflag \
 		spf13:viper:v1.21.0:spf13_viper/vendor/github.com/spf13/viper \
 		spiffe:go-spiffe:v2.6.0:spiffe_go_spiffe_v2/vendor/github.com/spiffe/go-spiffe/v2 \
 		sryoya:protorand:e7440656b2a4:sryoya_protorand/vendor/github.com/sryoya/protorand \
 		stoewer:go-strcase:v1.3.1:stoewer_go_strcase/vendor/github.com/stoewer/go-strcase \
 		stretchr:objx:v0.5.2:stretchr_objx/vendor/github.com/stretchr/objx \
 		stretchr:testify:v1.11.1:stretchr_testify/vendor/github.com/stretchr/testify \
 		subosito:gotenv:v1.6.0:subosito_gotenv/vendor/github.com/subosito/gotenv \
 		tchap:go-patricia:v2.3.3:tchap_go_patricia_v2/vendor/github.com/tchap/go-patricia/v2 \
 		testcontainers:testcontainers-go:v0.40.0:testcontainers_testcontainers_go/vendor/github.com/testcontainers/testcontainers-go \
 		tidwall:gjson:v1.18.0:tidwall_gjson/vendor/github.com/tidwall/gjson \
 		tidwall:match:v1.1.1:tidwall_match/vendor/github.com/tidwall/match \
 		tidwall:pretty:v1.2.0:tidwall_pretty/vendor/github.com/tidwall/pretty \
 		tklauser:go-sysconf:v0.3.14:tklauser_go_sysconf/vendor/github.com/tklauser/go-sysconf \
 		tklauser:numcpus:v0.8.0:tklauser_numcpus/vendor/github.com/tklauser/numcpus \
 		tniswong:go.rfcx:07783c52761f:tniswong_go_rfcx/vendor/github.com/tniswong/go.rfcx \
 		uber-go:automaxprocs:v1.6.0:uber_go_automaxprocs/vendor/go.uber.org/automaxprocs \
 		uber-go:mock:v0.6.0:uber_go_mock/vendor/go.uber.org/mock \
 		uber-go:multierr:v1.11.0:uber_go_multierr/vendor/go.uber.org/multierr \
 		uber-go:zap:v1.27.1:uber_go_zap/vendor/go.uber.org/zap \
 		uber-go:zap:exp/v0.3.0:uber_go_zap_exp \
 		valyala:fastjson:v1.6.4:valyala_fastjson/vendor/github.com/valyala/fastjson \
 		vektah:gqlparser:v2.5.31:vektah_gqlparser_v2/vendor/github.com/vektah/gqlparser/v2 \
 		volatiletech:null:v9.0.0:volatiletech_null_v9/vendor/github.com/volatiletech/null/v9 \
 		weastur:hclog-zerolog:v1.0.0:weastur_hclog_zerolog/vendor/github.com/weastur/hclog-zerolog \
 		x448:float16:v0.8.4:x448_float16/vendor/github.com/x448/float16 \
 		xeipuuv:gojsonpointer:02993c407bfb:xeipuuv_gojsonpointer/vendor/github.com/xeipuuv/gojsonpointer \
 		xeipuuv:gojsonreference:bd5ef7bd5415:xeipuuv_gojsonreference/vendor/github.com/xeipuuv/gojsonreference \
 		xo:terminfo:abceb7e1c41e:xo_terminfo/vendor/github.com/xo/terminfo \
-		yaml:go-yaml:v2.4.3:yaml_go_yaml_v2/vendor/go.yaml.in/yaml/v2 \
+		yaml:go-yaml:v2.4.4:yaml_go_yaml_v2/vendor/go.yaml.in/yaml/v2 \
 		yaml:go-yaml:v3.0.4:yaml_go_yaml_v3b/vendor/go.yaml.in/yaml/v3 \
 		yashtewari:glob-intersection:v0.2.0:yashtewari_glob_intersection/vendor/github.com/yashtewari/glob-intersection \
 		yosida95:uritemplate:v3.0.2:yosida95_uritemplate_v3/vendor/github.com/yosida95/uritemplate/v3 \
 		yuin:gopher-lua:v1.1.1:yuin_gopher_lua/vendor/github.com/yuin/gopher-lua \
 		yusufpapurcu:wmi:v1.2.4:yusufpapurcu_wmi/vendor/github.com/yusufpapurcu/wmi \
 		zeebo:assert:v1.3.1:zeebo_assert/vendor/github.com/zeebo/assert \
 		zeebo:blake3:v0.2.4:zeebo_blake3/vendor/github.com/zeebo/blake3 \
 		zeebo:xxh3:v1.0.2:zeebo_xxh3/vendor/github.com/zeebo/xxh3
 
 POMERIUMPIDDIR=		/var/run/${PORTNAME}/
 POMERIUM_USER?=		www
 
 SUB_LIST+=	POMERIUM_USER=${POMERIUM_USER} \
 		POMERIUMPIDDIR=${POMERIUMPIDDIR}
 PLIST_SUB+=	${SUB_LIST}
 SUB_FILES+=	extract_freebsd.go
 
 # Vendor symlink pairs: "src:dest" relative to ${WRKSRC}/vendor/.
 # The post-extract loop creates the parent directory, removes any existing
 # destination (idempotent), and installs a symlink.
 # go.shabbyrobe.org/gocovmerge (from sourcehut)
 VENDOR_SUBMOD_PAIRS+=	${WRKDIR}/gocovmerge-fa4f82cfbf4d:go.shabbyrobe.org/gocovmerge
 # charmbracelet/x monorepo submodules
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_charmbracelet_x_ansi}/ansi:github.com/charmbracelet/x/ansi \
 			${WRKSRC_charmbracelet_x_termios}/termios:github.com/charmbracelet/x/termios \
 			${WRKSRC_charmbracelet_x_windows}/windows:github.com/charmbracelet/x/windows
 # cncf/xds - module in go/ subdir
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_cncf_xds_go}/go:github.com/cncf/xds/go
 # googleapis/gax-go - v2 module in v2/ subdir
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_googleapis_gax_go_v2}/v2:github.com/googleapis/gax-go/v2
 # decred/dcrd - secp256k1 module in dcrec/secp256k1/ subdir
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_decred_dcrd_v4}/dcrec/secp256k1:github.com/decred/dcrd/dcrec/secp256k1/v4
 # containerd/errdefs v1.0.0 (replaces pkg/errdefs base)
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_containerd_errdefs}:github.com/containerd/errdefs
 # GoogleCloudPlatform/opentelemetry-operations-go detectors/gcp
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_googlecloudplatform_opentelemetry_operations_go_gcp}/detectors/gcp:github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
 # google-cloud-go submodules
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_googleapis_google_cloud_go_auth}/auth:cloud.google.com/go/auth \
 			${WRKSRC_googleapis_google_cloud_go_oauth2adapt}/auth/oauth2adapt:cloud.google.com/go/auth/oauth2adapt \
 			${WRKSRC_googleapis_google_cloud_go_metadata}/compute/metadata:cloud.google.com/go/compute/metadata \
 			${WRKSRC_googleapis_google_cloud_go_iam}/iam:cloud.google.com/go/iam \
 			${WRKSRC_googleapis_google_cloud_go_monitoring}/monitoring:cloud.google.com/go/monitoring \
 			${WRKSRC_googleapis_google_cloud_go_storage}/storage:cloud.google.com/go/storage
 # moby/sys submodules
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_moby_sys_sequential}/sequential:github.com/moby/sys/sequential \
 			${WRKSRC_moby_sys_userns}/userns:github.com/moby/sys/userns
 # opentelemetry-go-contrib submodules
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_open_telemetry_opentelemetry_go_contrib_1}/instrumentation/google.golang.org/grpc/otelgrpc:go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc \
 			${WRKSRC_open_telemetry_opentelemetry_go_contrib_2}/instrumentation/net/http/otelhttp:go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp \
 			${WRKSRC_open_telemetry_opentelemetry_go_contrib_3}/propagators/autoprop:go.opentelemetry.io/contrib/propagators/autoprop
 # opentelemetry-go-instrumentation sdk submodule
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_open_telemetry_opentelemetry_go_instrumentation}/sdk:go.opentelemetry.io/auto/sdk
 # opentelemetry-proto-go otlp submodule
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_open_telemetry_opentelemetry_proto_go}/otlp:go.opentelemetry.io/proto/otlp
 # uber-go/zap/exp submodule
 VENDOR_SUBMOD_PAIRS+=	${WRKSRC_uber_go_zap_exp}/exp:go.uber.org/zap/exp
 
 post-extract:
 	@${MKDIR} ${WRKSRC}/vendor
 	# buf.build/gen/go BSR module (from Go proxy zip; not auto-extracted)
 	@${LOCALBASE}/bin/unzip -qo ${DISTDIR}/v1.36.11-20251209175733-2a1774d88802.1.zip \
 		-d ${WRKSRC}/vendor
 	@${MV} "${WRKSRC}/vendor/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20251209175733-2a1774d88802.1" \
 		"${WRKSRC}/vendor/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go"
 	@for pair in ${VENDOR_SUBMOD_PAIRS}; do \
 	    src=$${pair%%:*}; dst=$${pair#*:}; \
 	    ${MKDIR} ${WRKSRC}/vendor/$$(dirname $$dst); \
 	    ${RM} -rf ${WRKSRC}/vendor/$$dst; \
 	    ${RLN} $$src ${WRKSRC}/vendor/$$dst; \
 	done
 	# The upstream tarball's vendor/modules.txt is incomplete: it lacks entries
 	# for the GH_TUPLE modules added as vendor symlinks above.  Go's -mod=vendor
 	# requires every vendored package to be listed in modules.txt.
 	# Regenerate files/modules.txt with: make generate-modules-txt
 	${CP} ${FILESDIR}/modules.txt ${WRKSRC}/vendor/modules.txt
 
 post-patch:
 	${CP} ${FILESDIR}/envoy_freebsd.go ${WRKSRC}/pkg/envoy/
 
 post-configure:
 	${MV} ${WRKDIR}/extract_freebsd.go ${WRKSRC}/pkg/envoy/
 
 post-install:
 	@${MKDIR} ${STAGEDIR}${PREFIX}/etc/${PORTNAME}
 	@${MKDIR} ${STAGEDIR}${POMERIUMPIDDIR}
 	${INSTALL_DATA} ${WRKSRC}/examples/config/config.example.yaml \
 		${STAGEDIR}${PREFIX}/etc/${PORTNAME}/config.yaml.sample
 
 # Maintenance target: regenerate files/modules.txt.
 # Requires network access.  Run after updating DISTVERSION or GH_TUPLE.
 # go mod vendor produces a complete vendor/modules.txt that covers both the
 # modules in the tarball and those added via GH_TUPLE symlinks.
 generate-modules-txt:
 	@${ECHO_MSG} "Regenerating files/modules.txt (requires network access) ..."
 	@${RM} -rf ${WRKDIR}/pomerium-modules-gen
 	@${MKDIR} ${WRKDIR}/pomerium-modules-gen
 	cd ${WRKDIR}/pomerium-modules-gen && \
 		git clone --depth 1 -b ${DISTVERSIONPREFIX}${DISTVERSION} \
 			https://github.com/${GH_ACCOUNT}/${GH_PROJECT}.git . && \
 		${GO_CMD} mod vendor && \
 		${CP} vendor/modules.txt ${FILESDIR}/modules.txt
 	@${ECHO_MSG} "Done.  Commit the updated files/modules.txt."
 
 .include <bsd.port.mk>
diff --git a/www/pomerium/distinfo b/www/pomerium/distinfo
index 4f443448f9df..344d651032fd 100644
--- a/www/pomerium/distinfo
+++ b/www/pomerium/distinfo
@@ -1,569 +1,569 @@
-TIMESTAMP = 1778215152
+TIMESTAMP = 1782359383
 SHA256 (fa4f82cfbf4d.tar.gz) = 891b75c04158d7ac1eccec7bf376b2d2cfb8a5f4d57f5cf4ef4daf4dede25afe
 SIZE (fa4f82cfbf4d.tar.gz) = 3290
 SHA256 (v1.36.11-20251209175733-2a1774d88802.1.zip) = b4928dfcf0ef0f3b485ccd35ca08ef58357d8ecdc9899d267784b789b5873c8f
 SIZE (v1.36.11-20251209175733-2a1774d88802.1.zip) = 116757
-SHA256 (pomerium-pomerium-v0.32.7_GH0.tar.gz) = 7a3fd6d8b3b1ff49645a82da1a83a6713afb1b631cf45bb2dab56eeb0c2dfaeb
-SIZE (pomerium-pomerium-v0.32.7_GH0.tar.gz) = 1909983
+SHA256 (pomerium-pomerium-v0.32.9_GH0.tar.gz) = ca69ae564e584be021dd2af85b8ccda0f791842dff9488f1e463cb26916f1d7c
+SIZE (pomerium-pomerium-v0.32.9_GH0.tar.gz) = 1910108
 SHA256 (Azure-go-ansiterm-faa5f7b0171c_GH0.tar.gz) = 16edfdc38ba67f0edc9508b882c7bb2bbeb2ac71aea3f7a78a5f745c0a75d2d4
 SIZE (Azure-go-ansiterm-faa5f7b0171c_GH0.tar.gz) = 22895
 SHA256 (CAFxX-httpcompression-v0.0.9_GH0.tar.gz) = 1e0b095d0fed3500971483ae3efe65ad0d857b62008af937d02e05ca9b316226
 SIZE (CAFxX-httpcompression-v0.0.9_GH0.tar.gz) = 87182
 SHA256 (DataDog-zstd-v1.5.7_GH0.tar.gz) = 17b03dcb1da22926a24676b41bc3d2951fa16b2ecbcfac89db8797b9108115ac
 SIZE (DataDog-zstd-v1.5.7_GH0.tar.gz) = 714450
 SHA256 (FiloSottile-bigmod-v0.0.3_GH0.tar.gz) = 440c00599f246bd765e512816c822d9d22c344aa3b2214c1043b4d253a550716
 SIZE (FiloSottile-bigmod-v0.0.3_GH0.tar.gz) = 18804
 SHA256 (FiloSottile-csrf-v0.2.1_GH0.tar.gz) = fac09de962b003d55b9f6b3c502bab7fd87cc54758d3f1ae920e437a6d6fe6c1
 SIZE (FiloSottile-csrf-v0.2.1_GH0.tar.gz) = 9883
 SHA256 (FiloSottile-keygen-790df0a991a0_GH0.tar.gz) = da7a52efefa1b26c8cc9f81014c88335cee4fed1c4771a133fcde2564e88a39b
 SIZE (FiloSottile-keygen-790df0a991a0_GH0.tar.gz) = 9545
 SHA256 (GoogleCloudPlatform-opentelemetry-operations-go-v0.54.0_GH0.tar.gz) = 6d5ee45f0d081c99aa90cd4d8458c37a864835fabdb77584bf66a51c4c88da5d
 SIZE (GoogleCloudPlatform-opentelemetry-operations-go-v0.54.0_GH0.tar.gz) = 1158265
-SHA256 (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.30.0_GH0.tar.gz) = 766a76f654f5d2ab5a4557b14bfb70e848ac3eff02b38d4855317a0974cf94e6
-SIZE (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.30.0_GH0.tar.gz) = 1159329
+SHA256 (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.31.0_GH0.tar.gz) = 48425fd0befdfab61b79d8c3eb341f3d85882de9127dff5861162340cbfb0f68
+SIZE (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.31.0_GH0.tar.gz) = 1160942
 SHA256 (Masterminds-semver-v3.4.0_GH0.tar.gz) = 47f43127587cd7750f2054c9ebab8851a3ea2011aefd7cc5319624dac8810799
 SIZE (Masterminds-semver-v3.4.0_GH0.tar.gz) = 30813
 SHA256 (Microsoft-go-winio-v0.6.2_GH0.tar.gz) = 0bf0aedbb0a38c494fda60804679e270fe98ca05dc9c2659584df1e3e1e0bd17
 SIZE (Microsoft-go-winio-v0.6.2_GH0.tar.gz) = 114145
 SHA256 (RaduBerinde-axisds-5135a0650657_GH0.tar.gz) = d5c4f9d89a9e800c6b009354c5aefed42b1f15f7b1d3865d26399cc3c35f4b33
 SIZE (RaduBerinde-axisds-5135a0650657_GH0.tar.gz) = 18404
 SHA256 (RaduBerinde-btreemap-3d62b7205d54_GH0.tar.gz) = 4160d4bc75acfe12a5ed30c4fd40e4a20aca1184ce078f9f2129fbd5d1ff4507
 SIZE (RaduBerinde-btreemap-3d62b7205d54_GH0.tar.gz) = 18979
 SHA256 (VictoriaMetrics-fastcache-v1.13.2_GH0.tar.gz) = 0321a18e9e5f888c43d035541bab26c5204927b4b53d43b241f1aedd481f1a69
 SIZE (VictoriaMetrics-fastcache-v1.13.2_GH0.tar.gz) = 1082253
 SHA256 (agnivade-levenshtein-v1.2.1_GH0.tar.gz) = 0c6b22d98ac06a8087d4cf93f73ee56fdffe915665e83e2b14223ad003f0d18d
 SIZE (agnivade-levenshtein-v1.2.1_GH0.tar.gz) = 5113
 SHA256 (andybalholm-brotli-v1.0.5_GH0.tar.gz) = 3a10ffe88b56cad3ecf4660750ef3fa0fd8511b06d3c302a5ef18b9c2a361c05
 SIZE (andybalholm-brotli-v1.0.5_GH0.tar.gz) = 1818063
 SHA256 (antlr4-go-antlr-v4.13.1_GH0.tar.gz) = 2738fa0e68c3a61fea8de7b6c2f55fc1b39c7337a3d9351c2042bf6003e5590a
 SIZE (antlr4-go-antlr-v4.13.1_GH0.tar.gz) = 118719
 SHA256 (apapsch-go-jsonmerge-v2.0.0_GH0.tar.gz) = 617f4e0c2029a2e6858a56c5fb2f8e6637cfdab42e4cfbfc8d2b95899fdee6fd
 SIZE (apapsch-go-jsonmerge-v2.0.0_GH0.tar.gz) = 9469
 SHA256 (armon-go-metrics-v0.4.1_GH0.tar.gz) = 1d57217a743e15c89e56abc339872045ffc986bf07ae5d62116ac33b25e62a0d
 SIZE (armon-go-metrics-v0.4.1_GH0.tar.gz) = 38330
 SHA256 (atotto-clipboard-v0.1.4_GH0.tar.gz) = cafd64dc78f293c1e774386186f3f817461a1a8940ef86d5d9e9524b58aa791e
 SIZE (atotto-clipboard-v0.1.4_GH0.tar.gz) = 5017
 SHA256 (aws-aws-sdk-go-v2-v1.41.0_GH0.tar.gz) = f5459c65ca7121a3f0fdba7674d0ad6d2a4b7bfb2e6a51a4d2487db3606120d2
 SIZE (aws-aws-sdk-go-v2-v1.41.0_GH0.tar.gz) = 57427078
 SHA256 (aws-smithy-go-v1.24.0_GH0.tar.gz) = 5b7af5b5c2ec2bb921f703f02e0958fe19d0ebcbc29e39cd39f39ad3458024ef
 SIZE (aws-smithy-go-v1.24.0_GH0.tar.gz) = 476424
 SHA256 (aymanbagabas-go-osc52-v2.0.1_GH0.tar.gz) = dad92f43db3cd17e7395db59533283b5888c2780fa1b2cb67344a9feaa3291e0
 SIZE (aymanbagabas-go-osc52-v2.0.1_GH0.tar.gz) = 5875
 SHA256 (beorn7-perks-v1.0.1_GH0.tar.gz) = 98db84bb0224a26094e6adba91b7ee7a1a7ace28cb648d818f8e779e6a19f825
 SIZE (beorn7-perks-v1.0.1_GH0.tar.gz) = 10867
 SHA256 (bits-and-blooms-bitset-v1.24.4_GH0.tar.gz) = da4d3efb6f87bce8746196cac483875f442f7c9f999aefdc6c11c590542b3769
 SIZE (bits-and-blooms-bitset-v1.24.4_GH0.tar.gz) = 94992
 SHA256 (bufbuild-protovalidate-go-v1.1.0_GH0.tar.gz) = 59934e29d0d2406df7d9887a2eae1d4dc24b42a3ed3e2af381e3eedd9ece0624
 SIZE (bufbuild-protovalidate-go-v1.1.0_GH0.tar.gz) = 408143
 SHA256 (caddyserver-certmagic-v0.25.1_GH0.tar.gz) = ceea666bfd8c9e73cf16ad4082c67b7ccf7b084ebd041588a5e6d733cdf730ee
 SIZE (caddyserver-certmagic-v0.25.1_GH0.tar.gz) = 142805
 SHA256 (caddyserver-zerossl-v0.1.4_GH0.tar.gz) = 4a4cf289c85df9eff2da081b7586e7b74560fe17fbb0cd4e7217ad54eb93e9b8
 SIZE (caddyserver-zerossl-v0.1.4_GH0.tar.gz) = 6836
 SHA256 (ccoveille-go-safecast-v1.8.2_GH0.tar.gz) = 430fb89ac9a63b0ae1b12717502af8996155030966840de7042b868de7680f15
 SIZE (ccoveille-go-safecast-v1.8.2_GH0.tar.gz) = 21306
 SHA256 (cenkalti-backoff-v4.3.0_GH0.tar.gz) = 5006d8626ff22ad2c584b0ab09b6f20f8013b46467381519b80f9c037ad8c2b0
 SIZE (cenkalti-backoff-v4.3.0_GH0.tar.gz) = 10952
 SHA256 (cenkalti-backoff-v5.0.3_GH0.tar.gz) = e967898e592ef838ca5ccfa68cf407d97adbfa757391f8942be9763646cbe3c5
 SIZE (cenkalti-backoff-v5.0.3_GH0.tar.gz) = 10253
 SHA256 (census-ecosystem-opencensus-go-exporter-prometheus-v0.4.2_GH0.tar.gz) = 883e9692b54387ff154493582f472b40f67f9f7b41c17c9b6faab9b6d7113303
 SIZE (census-ecosystem-opencensus-go-exporter-prometheus-v0.4.2_GH0.tar.gz) = 60705
 SHA256 (census-instrumentation-opencensus-go-v0.24.0_GH0.tar.gz) = 048708914541817193330ce052026deb0c617c9d953ac15ae601ab2bde5788d1
 SIZE (census-instrumentation-opencensus-go-v0.24.0_GH0.tar.gz) = 176752
 SHA256 (cespare-xxhash-v2.3.0_GH0.tar.gz) = 0e3dda07b03a5f3733506218860ecb2d50c0f01f16299b5d60902ef5158cbde5
 SIZE (cespare-xxhash-v2.3.0_GH0.tar.gz) = 12696
 SHA256 (charmbracelet-bubbles-v2.0.0-rc.1_GH0.tar.gz) = 3ccb6460086b70e107c590b190c1de2560a0de84aad77403c3ac50ff6fbac0c9
 SIZE (charmbracelet-bubbles-v2.0.0-rc.1_GH0.tar.gz) = 94980
 SHA256 (charmbracelet-bubbletea-v2.0.0-rc.2_GH0.tar.gz) = 890bb564906fef382a84afedea943a3b4bfa54461e0800d42b68e481e12aa7c8
 SIZE (charmbracelet-bubbletea-v2.0.0-rc.2_GH0.tar.gz) = 2238938
 SHA256 (charmbracelet-colorprofile-v0.4.1_GH0.tar.gz) = 4113702b0a3c4efdf9b4a6b1c89807de357027ff8d4d0a019994be848ef55c09
 SIZE (charmbracelet-colorprofile-v0.4.1_GH0.tar.gz) = 15484
 SHA256 (charmbracelet-lipgloss-4b304240aab7_GH0.tar.gz) = dff1627887e2ba76b0fb1b45312e9fae8a74b87a9427cdf42d5bc131fa505dbe
 SIZE (charmbracelet-lipgloss-4b304240aab7_GH0.tar.gz) = 130257
 SHA256 (charmbracelet-ultraviolet-377898bcce38_GH0.tar.gz) = da1b4fb2db75649103ac8efa541ed23cbdc084136512263df56bc74ddf457b86
 SIZE (charmbracelet-ultraviolet-377898bcce38_GH0.tar.gz) = 152768
 SHA256 (charmbracelet-x-ansi-v0.11.3_GH0.tar.gz) = 4aed741658c8f0dd25f55dccdd24c512c8705bb45b6ad61522e5d70ef1657526
 SIZE (charmbracelet-x-ansi-v0.11.3_GH0.tar.gz) = 490466
 SHA256 (charmbracelet-x-term-v0.2.2_GH0.tar.gz) = a4fd984c95c538db5063c7cf003d69e93cdc47e5eac6749d75e1594911c651b0
 SIZE (charmbracelet-x-term-v0.2.2_GH0.tar.gz) = 395884
 SHA256 (charmbracelet-x-termios-v0.1.1_GH0.tar.gz) = c1076c1430d71b7c9d909c4cf4be1b5f403fde6a3814bca89ee6115a3f93a3ab
 SIZE (charmbracelet-x-termios-v0.1.1_GH0.tar.gz) = 237438
 SHA256 (charmbracelet-x-windows-v0.2.2_GH0.tar.gz) = 29b65caaf4858621a11638c247dea525f918cae65ed470a1724412b00cbdfc4f
 SIZE (charmbracelet-x-windows-v0.2.2_GH0.tar.gz) = 305041
 SHA256 (clipperhouse-displaywidth-v0.6.1_GH0.tar.gz) = a94a2289ba8722c4166c4cecdeeefb437261ee78209a47dc413b0cb3d011de6d
 SIZE (clipperhouse-displaywidth-v0.6.1_GH0.tar.gz) = 160045
 SHA256 (clipperhouse-stringish-v0.1.1_GH0.tar.gz) = 1bfe722c5ecd4b6a360478650ebae20518fd094e282b37edc884167413e106c7
 SIZE (clipperhouse-stringish-v0.1.1_GH0.tar.gz) = 2316884
 SHA256 (clipperhouse-uax29-v2.3.0_GH0.tar.gz) = 387df76ee68d5c464a78da2885f44a98ef644c1b407c1d49f51f71b4c2484679
 SIZE (clipperhouse-uax29-v2.3.0_GH0.tar.gz) = 282019
 SHA256 (cloudflare-circl-v1.6.3_GH0.tar.gz) = 1bf5a8618060d189780981675ef41fadf80da00069e80fa85c79554ed339d955
 SIZE (cloudflare-circl-v1.6.3_GH0.tar.gz) = 48312379
 SHA256 (cncf-xds-ee656c7534f5_GH0.tar.gz) = 6cc1f8cdb20e6200a77d3145485033b4aa355ea458927e7348da8a273424370c
 SIZE (cncf-xds-ee656c7534f5_GH0.tar.gz) = 181486
 SHA256 (cockroachdb-crlib-1264a2edc35b_GH0.tar.gz) = 62edcb5ae110c025d25e4402df016a69128e9fe43d1c12e54318f26dd0646b97
 SIZE (cockroachdb-crlib-1264a2edc35b_GH0.tar.gz) = 29402
 SHA256 (cockroachdb-errors-v1.11.3_GH0.tar.gz) = f934fb0bccf6d7f81ca0672c743bb56e468217640d68f3cbf548a8e9999867db
 SIZE (cockroachdb-errors-v1.11.3_GH0.tar.gz) = 244347
 SHA256 (cockroachdb-logtags-21c54148d20b_GH0.tar.gz) = 1f02cddfdd25c9af7f47c50e2f90f6bb0c4875be5294b381d6bd77b571652e5d
 SIZE (cockroachdb-logtags-21c54148d20b_GH0.tar.gz) = 8865
 SHA256 (cockroachdb-pebble-v2.1.3_GH0.tar.gz) = d8537c4a6b8769ea737bbeb95ca7502658b5f71e61fcf54ba7d9954e22aa2c4a
 SIZE (cockroachdb-pebble-v2.1.3_GH0.tar.gz) = 5501963
 SHA256 (cockroachdb-redact-v1.1.5_GH0.tar.gz) = 10e088fa81d4a7207b36b01a0a1d102d9f8c00b234463dc5524164b9fecd11c0
 SIZE (cockroachdb-redact-v1.1.5_GH0.tar.gz) = 50137
 SHA256 (cockroachdb-swiss-b0f6560f979b_GH0.tar.gz) = f17feb4fcb518a5ab2e52a2136f9122ea27c7f0dcbfd9f9bc0da48bc82e8fe34
 SIZE (cockroachdb-swiss-b0f6560f979b_GH0.tar.gz) = 47936
 SHA256 (cockroachdb-tokenbucket-cc333fc44b06_GH0.tar.gz) = 4f0d5f35dd497303103fd40fc4226f09d921f513cdbc94f4f917e11fd1cd80c7
 SIZE (cockroachdb-tokenbucket-cc333fc44b06_GH0.tar.gz) = 7387
 SHA256 (containerd-errdefs-v0.3.0_GH0.tar.gz) = d72f9e7e39174566b0d71b64e495ef4d10cb16babf51b19d43063716343b7fa2
 SIZE (containerd-errdefs-v0.3.0_GH0.tar.gz) = 20318
 SHA256 (containerd-errdefs-v1.0.0_GH0.tar.gz) = 78573bda5a8376601590d570cd23e362ca2af3d3dc33d9ab3e6404852de33737
 SIZE (containerd-errdefs-v1.0.0_GH0.tar.gz) = 20416
 SHA256 (containerd-log-v0.1.0_GH0.tar.gz) = bfe14fa56ab57783e3ee827351e5704b04870cfb2a4aa03a13a7b2b81cc56c61
 SIZE (containerd-log-v0.1.0_GH0.tar.gz) = 9654
 SHA256 (containerd-platforms-v1.0.0-rc.2_GH0.tar.gz) = 32bcbf8614ebf3e92cf73383139ef115b428158dfd3f5055bc1798cedab01c37
 SIZE (containerd-platforms-v1.0.0-rc.2_GH0.tar.gz) = 22220
 SHA256 (coreos-go-oidc-v3.17.0_GH0.tar.gz) = a518aa443be35fa95a58ab932f5dc662befcca8a6ae9d06a53ef775dcdda4b9f
 SIZE (coreos-go-oidc-v3.17.0_GH0.tar.gz) = 33429
 SHA256 (cpuguy83-dockercfg-v0.3.2_GH0.tar.gz) = b39388b8f261c75de246db1d343f9f1a15944d39c2aa66617b9c8eb420b2e6b5
 SIZE (cpuguy83-dockercfg-v0.3.2_GH0.tar.gz) = 6975
 SHA256 (davecgh-go-spew-d8f796af33cc_GH0.tar.gz) = 21505c2cb5cb4e2b8ae3007f3f6db6edb9f1c28511f98975b6b0dedf0e3fa24e
 SIZE (davecgh-go-spew-d8f796af33cc_GH0.tar.gz) = 42183
 SHA256 (decred-dcrd-dcrec-secp256k1-v4.4.0_GH0.tar.gz) = 2aafb9662b96070d350f3399f09c35974529e55f6ef8364a3c8ee7c6455510d6
 SIZE (decred-dcrd-dcrec-secp256k1-v4.4.0_GH0.tar.gz) = 7063031
 SHA256 (distribution-reference-v0.6.0_GH0.tar.gz) = 379bbf93dc3365a5c5fcd6c2538b63f21f9e5493a439b69999e01fad3de1ea39
 SIZE (distribution-reference-v0.6.0_GH0.tar.gz) = 34139
 SHA256 (docker-go-connections-v0.6.0_GH0.tar.gz) = f97cf511eed1de33b1bfa83e2179bd599d80c693babbc1875d97d001a9f925a0
 SIZE (docker-go-connections-v0.6.0_GH0.tar.gz) = 35374
 SHA256 (docker-go-units-v0.5.0_GH0.tar.gz) = db0a1d3e4deaa52401423bf76cce0a5100cf2e51db3c33cf3c70b7953c7d6234
 SIZE (docker-go-units-v0.5.0_GH0.tar.gz) = 12243
 SHA256 (ebitengine-purego-v0.8.4_GH0.tar.gz) = 8d12b10d26e1ed9f51befa6f1cf8c56c6f4e52869a5c7a6b88e7bd63ff76d012
 SIZE (ebitengine-purego-v0.8.4_GH0.tar.gz) = 66957
 SHA256 (envoyproxy-go-control-plane-envoy-v1.36.0_GH0.tar.gz) = dea2aaa916aa7a35abec546af73160252f284cceb2074545d051f4ab5a905f84
 SIZE (envoyproxy-go-control-plane-envoy-v1.36.0_GH0.tar.gz) = 3684745
 SHA256 (envoyproxy-protoc-gen-validate-v1.3.0_GH0.tar.gz) = 26dc6db523ee943af51fdfc292658a2dbe7046735654f1dc839745988f0fe26b
 SIZE (envoyproxy-protoc-gen-validate-v1.3.0_GH0.tar.gz) = 190514
-SHA256 (exaring-otelpgx-v0.9.4_GH0.tar.gz) = feee1c13cce3d12f318de3011329860cee259dfbaf3ac266c20d40bbc0ebddaf
-SIZE (exaring-otelpgx-v0.9.4_GH0.tar.gz) = 15873
+SHA256 (exaring-otelpgx-v0.10.0_GH0.tar.gz) = effb95ba7ce11e04168b6a9044e0d5666e214bc65e8e5392a287a4fa807483c7
+SIZE (exaring-otelpgx-v0.10.0_GH0.tar.gz) = 16165
 SHA256 (fatih-color-v1.18.0_GH0.tar.gz) = 586b2b42a4165ac52b35808be1238f90d109789bfcb1ddecd3f512eddbac0a9f
 SIZE (fatih-color-v1.18.0_GH0.tar.gz) = 12717
 SHA256 (felixge-httpsnoop-v1.0.4_GH0.tar.gz) = ffb63ba081e4c2360342dea2079d08b8560c315b2f458885fd34639786a1aa3d
 SIZE (felixge-httpsnoop-v1.0.4_GH0.tar.gz) = 11954
 SHA256 (fsnotify-fsnotify-v1.9.0_GH0.tar.gz) = 3ff59fb248bb76a6bf4fbe99586aec08f7218743187c71da3ff2e34c23cc1a05
 SIZE (fsnotify-fsnotify-v1.9.0_GH0.tar.gz) = 73945
 SHA256 (fxamacker-cbor-v2.9.0_GH0.tar.gz) = c7fb6ae1c3fb7628e88ba299f7bd0f89ad9ebc76294dde0a93305246c1895d67
 SIZE (fxamacker-cbor-v2.9.0_GH0.tar.gz) = 181530
 SHA256 (gaissmai-bart-v0.26.0_GH0.tar.gz) = 549c0434293db116d167fcf1152c2dca5619475cf12c0ad52e614043654529ba
 SIZE (gaissmai-bart-v0.26.0_GH0.tar.gz) = 2922819
 SHA256 (getsentry-sentry-go-v0.27.0_GH0.tar.gz) = f45d6ab693fe1aae167153f0e776f24dad05513192c7c2db669c94c2c6a0eb49
 SIZE (getsentry-sentry-go-v0.27.0_GH0.tar.gz) = 190889
 SHA256 (go-chi-chi-v5.2.3_GH0.tar.gz) = 7099aa43243f3ed21dd5cde7a63c2a6b094035336b238bf31501fbc041a95cab
 SIZE (go-chi-chi-v5.2.3_GH0.tar.gz) = 87936
 SHA256 (go-ini-ini-v1.67.0_GH0.tar.gz) = 06ba51234140118d1b6064f1817aa89cc971c6e7ce04cb9d286e6660d89296c8
 SIZE (go-ini-ini-v1.67.0_GH0.tar.gz) = 53531
-SHA256 (go-jose-go-jose-v3.0.4_GH0.tar.gz) = 37a602b9edf79aa6a1c4976aaef5c6d87248040882f952aaad2afeb39f69765d
-SIZE (go-jose-go-jose-v3.0.4_GH0.tar.gz) = 320917
-SHA256 (go-jose-go-jose-v4.1.3_GH0.tar.gz) = 2e6ca9b7c384154486c7cb04465103415b8808e2a98f17118646ee217c3c7acf
-SIZE (go-jose-go-jose-v4.1.3_GH0.tar.gz) = 321258
+SHA256 (go-jose-go-jose-v3.0.5_GH0.tar.gz) = d1195e5f8712785b247476d63df886e2c5bbb7defa721c4ed8a311d5da72dfa7
+SIZE (go-jose-go-jose-v3.0.5_GH0.tar.gz) = 322240
+SHA256 (go-jose-go-jose-v4.1.4_GH0.tar.gz) = a8c9fade9971831045e8b7d78f641546639f9f0088477e8d9717a637320c8004
+SIZE (go-jose-go-jose-v4.1.4_GH0.tar.gz) = 322427
 SHA256 (go-kit-log-v0.2.1_GH0.tar.gz) = b37718967f9cbdb3eea4aa2fa9420b7d329b6bab7f9b85f970db197257226152
 SIZE (go-kit-log-v0.2.1_GH0.tar.gz) = 30579
 SHA256 (go-logfmt-logfmt-v0.6.0_GH0.tar.gz) = e4c26af3226cee1486004da7ebb1f0b8485df62513cca6671edf7c4d420fadfd
 SIZE (go-logfmt-logfmt-v0.6.0_GH0.tar.gz) = 12609
 SHA256 (go-logr-logr-v1.4.3_GH0.tar.gz) = 195536e2f36cc061abba5e0f9153a227c39fb9f9a673eec571be1cbceb50d9e1
 SIZE (go-logr-logr-v1.4.3_GH0.tar.gz) = 57731
 SHA256 (go-logr-stdr-v1.2.2_GH0.tar.gz) = 37d975b280d884ca0d55a800bc6e47314b6e86268e56254f9d15d19ca9404eb8
 SIZE (go-logr-stdr-v1.2.2_GH0.tar.gz) = 9098
 SHA256 (go-ole-go-ole-v1.3.0_GH0.tar.gz) = 18fca64d2973bb1fd698caf9496e540a3e9790381b3b28e55dfbe0f1a201f2ad
 SIZE (go-ole-go-ole-v1.3.0_GH0.tar.gz) = 53263
 SHA256 (go-viper-mapstructure-v2.4.0_GH0.tar.gz) = fffa0361c2278be0a8b2a3fa4c34ef5290aaa638a9660d1e69aabd50fc967c83
 SIZE (go-viper-mapstructure-v2.4.0_GH0.tar.gz) = 53305
 SHA256 (go-yaml-yaml-v2.4.0_GH0.tar.gz) = d8e94679e5fff6bd1a35e10241543929a5f3da44f701755babf99b3daf0faac0
 SIZE (go-yaml-yaml-v2.4.0_GH0.tar.gz) = 73209
 SHA256 (go-yaml-yaml-v3.0.1_GH0.tar.gz) = cf05411540d3e6ef8f1fd88434b34f94cedaceb540329031d80e23b74540c4e5
 SIZE (go-yaml-yaml-v3.0.1_GH0.tar.gz) = 91173
 SHA256 (gobwas-glob-v0.2.3_GH0.tar.gz) = 325026fc78bcebcf31151b6e060f4e1c3321b04ded3dab63b63610b323c10850
 SIZE (gobwas-glob-v0.2.3_GH0.tar.gz) = 25962
 SHA256 (goccy-go-json-v0.10.5_GH0.tar.gz) = 15a6994e238a3d520816d53eacd115e6d3fd0816e570e8ae79f3a8fcf74616aa
 SIZE (goccy-go-json-v0.10.5_GH0.tar.gz) = 399031
 SHA256 (gogo-protobuf-v1.3.2_GH0.tar.gz) = 2bb4b13d6e56b3911f09b8e9ddd15708477fbff8823c057cc79dd99c9a452b34
 SIZE (gogo-protobuf-v1.3.2_GH0.tar.gz) = 2038725
-SHA256 (golang-crypto-v0.47.0_GH0.tar.gz) = b0945266477967f1e5000fb396fca14e91affb701c3ed9d91a6091da57e91809
-SIZE (golang-crypto-v0.47.0_GH0.tar.gz) = 2148933
+SHA256 (golang-crypto-v0.52.0_GH0.tar.gz) = ff347c068bf7bc9affc18579ef637740750aa269f9c0afb82d4f3a7a9269a20f
+SIZE (golang-crypto-v0.52.0_GH0.tar.gz) = 2136175
 SHA256 (golang-exp-944ab1f22d93_GH0.tar.gz) = 21c85f787e766c27a84a3b7ef7dcdfac8b87940dd7be702737aabe2d176d2cfc
 SIZE (golang-exp-944ab1f22d93_GH0.tar.gz) = 1762417
 SHA256 (golang-groupcache-2c02b8208cf8_GH0.tar.gz) = b1c7464afcdeeca03a78abc75a514e9dcf03f87be4d407f64f8a5357596b4dbb
 SIZE (golang-groupcache-2c02b8208cf8_GH0.tar.gz) = 26678
-SHA256 (golang-mod-v0.32.0_GH0.tar.gz) = 720e07d384a0dd9822afd605670ba645d1c2e53981a0b9b303c1ddc3a1f0d150
-SIZE (golang-mod-v0.32.0_GH0.tar.gz) = 126357
-SHA256 (golang-net-v0.49.0_GH0.tar.gz) = b1b704222b6be7ed2e1f8c0d456b973c708b6065a1fe9aab1526a10baf5c01a1
-SIZE (golang-net-v0.49.0_GH0.tar.gz) = 1528587
-SHA256 (golang-oauth2-v0.34.0_GH0.tar.gz) = 7b5aa72ed4631661a3a8fafbc779724296b57d946bd2c0d5e513e48c8e83329f
-SIZE (golang-oauth2-v0.34.0_GH0.tar.gz) = 100945
+SHA256 (golang-mod-v0.36.0_GH0.tar.gz) = 21c13bc31e267cccd1daa515d6769649165acc856119f793bef364ab57a70565
+SIZE (golang-mod-v0.36.0_GH0.tar.gz) = 127866
+SHA256 (golang-net-v0.55.0_GH0.tar.gz) = 38f60aa36e15d9233e9a4386f020168adaca5c829a60b7e80ab6f942dd47ffb1
+SIZE (golang-net-v0.55.0_GH0.tar.gz) = 1341991
+SHA256 (golang-oauth2-v0.35.0_GH0.tar.gz) = 6183dae34900fc962e6f8303c635b7887b72ca4b011093ebdb384e14229945e4
+SIZE (golang-oauth2-v0.35.0_GH0.tar.gz) = 102697
 SHA256 (golang-snappy-v1.0.0_GH0.tar.gz) = 433e6bf6a8380f57dd92020542d865802124e4a9139dc0b1fab5ff51704310bf
 SIZE (golang-snappy-v1.0.0_GH0.tar.gz) = 66168
-SHA256 (golang-sync-v0.19.0_GH0.tar.gz) = bb77b590cf5b3703d30cbd19a4ac7ed5f0fb4af67fbc87340ba06023e81db533
-SIZE (golang-sync-v0.19.0_GH0.tar.gz) = 18196
-SHA256 (golang-sys-v0.40.0_GH0.tar.gz) = 1f52e73c517335a1d3c1d62ac5dbd36af6d397ad9bfb78a991c2b4d772ca3ce7
-SIZE (golang-sys-v0.40.0_GH0.tar.gz) = 1535845
-SHA256 (golang-term-v0.39.0_GH0.tar.gz) = af3fd180f332a354cbdfee08b4fab0f4a8c00f4637b96e76ee0d9344e34173f5
-SIZE (golang-term-v0.39.0_GH0.tar.gz) = 16449
-SHA256 (golang-text-v0.33.0_GH0.tar.gz) = c693bfb21a3b4cc433a85c1ba726887c675366976593c7588f177064a01e6252
-SIZE (golang-text-v0.33.0_GH0.tar.gz) = 8970561
+SHA256 (golang-sync-v0.21.0_GH0.tar.gz) = 375daf62cdc3612f7155587763b2b15562ac5aff1e38000c5853a5c1644f7dc7
+SIZE (golang-sync-v0.21.0_GH0.tar.gz) = 18187
+SHA256 (golang-sys-v0.46.0_GH0.tar.gz) = d5987b98206b0dca2768fd31ef078e40a1671db231c062f175bfea6af6d3176b
+SIZE (golang-sys-v0.46.0_GH0.tar.gz) = 1549880
+SHA256 (golang-term-v0.44.0_GH0.tar.gz) = b5238a70779c6aad2b9309565a2d5744823e7efba857e8c6086b37b5d918983a
+SIZE (golang-term-v0.44.0_GH0.tar.gz) = 16449
+SHA256 (golang-text-v0.38.0_GH0.tar.gz) = a2506f66cd14b919b0314d396530bfc325d14b2242b5547f827506bee65995b8
+SIZE (golang-text-v0.38.0_GH0.tar.gz) = 6772269
 SHA256 (golang-time-v0.14.0_GH0.tar.gz) = beae412dac1d5dd931348f9c40c346b730330020172b12a8b529bf452a9da2fb
 SIZE (golang-time-v0.14.0_GH0.tar.gz) = 12526
-SHA256 (golang-tools-v0.41.0_GH0.tar.gz) = 2df1ea5f56bb095c396b3a2d65252db15321165e785b7e5d9f5d78230e1cc68f
-SIZE (golang-tools-v0.41.0_GH0.tar.gz) = 8346906
+SHA256 (golang-tools-v0.45.0_GH0.tar.gz) = 1763e56760a51f25ddf1e73cc8ada35c3f81f2fa1094b6118acaa8ec5a51a146
+SIZE (golang-tools-v0.45.0_GH0.tar.gz) = 8503442
 SHA256 (google-btree-v1.1.3_GH0.tar.gz) = ecb1f97cff16ce5b18a12ed31728a82a8e0df0c0181febf2b9c39dd3ed362ffd
 SIZE (google-btree-v1.1.3_GH0.tar.gz) = 19772
 SHA256 (google-cel-go-v0.26.1_GH0.tar.gz) = f2d94e621d87f361713b220419c54f3630c6f23368b8e643d50f4330da16ac1d
 SIZE (google-cel-go-v0.26.1_GH0.tar.gz) = 1592146
 SHA256 (google-cel-spec-v0.25.1_GH0.tar.gz) = 13583c5a312861648449845b709722676a3c9b43396b6b8e9cbe4538feb74ad2
 SIZE (google-cel-spec-v0.25.1_GH0.tar.gz) = 196469
 SHA256 (google-go-cmp-v0.7.0_GH0.tar.gz) = c98f4f998ad8134b26816500b5c4c5cd6329905c0610b0c1f031efe7fbb469af
 SIZE (google-go-cmp-v0.7.0_GH0.tar.gz) = 105149
 SHA256 (google-go-genproto-9219d122eba9_GH0.tar.gz) = 7437c020a141617d99b56cacd848e7567a573136b25836b3834c3eb95340851d
 SIZE (google-go-genproto-9219d122eba9_GH0.tar.gz) = 5914335
-SHA256 (google-go-genproto-0a764e51fe1b_GH0.tar.gz) = 4247e7f1aea325c27ba18f172c9ebacb0d509413b60ba67a822ae532e4a552a9
-SIZE (google-go-genproto-0a764e51fe1b_GH0.tar.gz) = 5924455
-SHA256 (google-go-genproto-97cd9d5aeac2_GH0.tar.gz) = a2da073360202c657f54bcfad28fe6355c25527765d3adef54291a860371d632
-SIZE (google-go-genproto-97cd9d5aeac2_GH0.tar.gz) = 5924246
+SHA256 (google-go-genproto-9d38bb4040a9_GH0.tar.gz) = f6d914f748f038b6d2e3f9842d369f69ed193c65a4e83b46f929f3d5d562b981
+SIZE (google-go-genproto-9d38bb4040a9_GH0.tar.gz) = 5951642
+SHA256 (google-go-genproto-6f92a3bedf2d_GH0.tar.gz) = 7d14f1c664322581dbe357098fc061d5deefcca3c626e5e8a2cd24154248dd2a
+SIZE (google-go-genproto-6f92a3bedf2d_GH0.tar.gz) = 5951736
 SHA256 (google-go-jsonnet-v0.21.0_GH0.tar.gz) = ee7aa004e78fb49608bcf28142a7494dc204a07cc07d323dd2cff3d97298c696
 SIZE (google-go-jsonnet-v0.21.0_GH0.tar.gz) = 757762
 SHA256 (google-go-tpm-v0.9.8_GH0.tar.gz) = 93b44f860c962bc92b7ab5af4d9b19b2e497e1e46a14a9a7500af13f46742587
 SIZE (google-go-tpm-v0.9.8_GH0.tar.gz) = 393145
 SHA256 (google-jsonschema-go-v0.4.2_GH0.tar.gz) = 8e9205328d25162add3d999946e8265cc4ce6210213cedbaf09552bd6aae2ae0
 SIZE (google-jsonschema-go-v0.4.2_GH0.tar.gz) = 98345
 SHA256 (google-s2a-go-v0.1.9_GH0.tar.gz) = c996a4f8f50ca2229787fcb8066d963a4e17908a6552b3d2c138e1f9ee522d4d
 SIZE (google-s2a-go-v0.1.9_GH0.tar.gz) = 276329
 SHA256 (google-uuid-v1.6.0_GH0.tar.gz) = ee63376b5675376c60e055ed66e5f3651ccc703bd580c022b8ad00cea309252d
 SIZE (google-uuid-v1.6.0_GH0.tar.gz) = 20896
 SHA256 (googleapis-enterprise-certificate-proxy-v0.3.7_GH0.tar.gz) = d0129ad944844ce059b612cd503cf680c9d5e40145b14c6821959d4dbdf2d5f6
 SIZE (googleapis-enterprise-certificate-proxy-v0.3.7_GH0.tar.gz) = 56899
 SHA256 (googleapis-gax-go-v2.15.0_GH0.tar.gz) = 03a08c1d3680c9dd20c053fd457e3f2bdddee9592685cccbee7609a1d257300d
 SIZE (googleapis-gax-go-v2.15.0_GH0.tar.gz) = 94506
 SHA256 (googleapis-google-api-go-client-v0.258.0_GH0.tar.gz) = ba46eefdad00fccdc12d87d09601e07af1468183d2bcbe38b52181749fbeccb9
 SIZE (googleapis-google-api-go-client-v0.258.0_GH0.tar.gz) = 42275531
 SHA256 (googleapis-google-cloud-go-v0.123.0_GH0.tar.gz) = e7ae8e6a8ea214bcf8836ce2bbf8428833a44c81aa13793225b751cb9412f6f3
 SIZE (googleapis-google-cloud-go-v0.123.0_GH0.tar.gz) = 38712917
 SHA256 (googleapis-google-cloud-go-auth-v0.17.0_GH0.tar.gz) = 1c09e9c0a565e51b21d4ed646f2a18abe1f39a8fdfcf2486788649e588cd2740
 SIZE (googleapis-google-cloud-go-auth-v0.17.0_GH0.tar.gz) = 38909188
 SHA256 (googleapis-google-cloud-go-auth-oauth2adapt-v0.2.8_GH0.tar.gz) = 55481ab06b21172f13e4c6862927873a90ca8eddf1faf936d481cc8b6ee70744
 SIZE (googleapis-google-cloud-go-auth-oauth2adapt-v0.2.8_GH0.tar.gz) = 31950086
 SHA256 (googleapis-google-cloud-go-compute-metadata-v0.9.0_GH0.tar.gz) = 6c91b83e40f93b7a9e07d41bf06fe615a9a4498f6aaa6e8e32328231b9c260b3
 SIZE (googleapis-google-cloud-go-compute-metadata-v0.9.0_GH0.tar.gz) = 38806645
 SHA256 (googleapis-google-cloud-go-iam-v1.5.3_GH0.tar.gz) = 09e1e2cdefe2265196e36895da9d30f728ddf0de75a92eb0df5ba8ae8c67fe8f
 SIZE (googleapis-google-cloud-go-iam-v1.5.3_GH0.tar.gz) = 38989985
 SHA256 (googleapis-google-cloud-go-monitoring-v1.24.2_GH0.tar.gz) = 346d98d4cbb6879110fdd5afe46df35e4fae822380e6f40b6e779986f3cf9646
 SIZE (googleapis-google-cloud-go-monitoring-v1.24.2_GH0.tar.gz) = 32572147
 SHA256 (googleapis-google-cloud-go-storage-v1.58.0_GH0.tar.gz) = 7d9862e49d24aa36cf44e5ef467821dcc364f09332014204d0a655bf927801fd
 SIZE (googleapis-google-cloud-go-storage-v1.58.0_GH0.tar.gz) = 40206964
 SHA256 (gorilla-mux-v1.8.1_GH0.tar.gz) = c2a09e78d1886abb2d291b472eba3ac9185acb35234c1f5616669664ba893d6d
 SIZE (gorilla-mux-v1.8.1_GH0.tar.gz) = 47033
 SHA256 (gorilla-securecookie-v1.1.2_GH0.tar.gz) = 6a95562e0bf0b29033bfe75a55a28ca547d76b5472c0865f38ba9d8eb44c2ddf
 SIZE (gorilla-securecookie-v1.1.2_GH0.tar.gz) = 12180
 SHA256 (gorilla-websocket-e064f32e3674_GH0.tar.gz) = c3f89b5540787001bc5818aaadd8f1261b6bf2a197510c3ac73f6c2a35cbcdfd
 SIZE (gorilla-websocket-e064f32e3674_GH0.tar.gz) = 63326
 SHA256 (gregjones-httpcache-901d90724c79_GH0.tar.gz) = 2280e11c0ac820bc32717ccb8f74c95a151789c8db86d7a70b7f8f475ae0cc26
 SIZE (gregjones-httpcache-901d90724c79_GH0.tar.gz) = 14164
 SHA256 (grpc-ecosystem-go-grpc-middleware-v2.3.3_GH0.tar.gz) = 653cae72dbba078a04eb6eda0e8b330b3832a5794af28829c32a965aa26a29d0
 SIZE (grpc-ecosystem-go-grpc-middleware-v2.3.3_GH0.tar.gz) = 334677
-SHA256 (grpc-ecosystem-grpc-gateway-v2.27.3_GH0.tar.gz) = 9717bae2d2f783d73f165d57a1f70327abf21629198527b2be09efe43f5ba167
-SIZE (grpc-ecosystem-grpc-gateway-v2.27.3_GH0.tar.gz) = 908363
-SHA256 (grpc-grpc-go-v1.79.3_GH0.tar.gz) = cf6ccdf552571e6a85072bcbbc16d0d6d7e71591f9415ee1c8e3e4bb4d5a6e51
-SIZE (grpc-grpc-go-v1.79.3_GH0.tar.gz) = 2973062
+SHA256 (grpc-ecosystem-grpc-gateway-v2.28.0_GH0.tar.gz) = 3ccc41d6384f478413c9e84cf1560ba7184b302f8f030ded12063b85d2b7156e
+SIZE (grpc-ecosystem-grpc-gateway-v2.28.0_GH0.tar.gz) = 933882
+SHA256 (grpc-grpc-go-v1.80.0_GH0.tar.gz) = 69942eecf155d0e8d9ea5e74284254e92961b01865daabd06f15361ed1557115
+SIZE (grpc-grpc-go-v1.80.0_GH0.tar.gz) = 2993187
 SHA256 (hashicorp-errwrap-v1.1.0_GH0.tar.gz) = 0d73891a7a179e50a142ac8832db97b17c792d29ae205b0e6aeedde4c43d51a4
 SIZE (hashicorp-errwrap-v1.1.0_GH0.tar.gz) = 8581
 SHA256 (hashicorp-go-hclog-v1.6.2_GH0.tar.gz) = 1c7898893b0260c07bf07d7a9f5685e89e43d4f95343bb74e93552b6c51d5c17
 SIZE (hashicorp-go-hclog-v1.6.2_GH0.tar.gz) = 32420
 SHA256 (hashicorp-go-immutable-radix-v1.0.0_GH0.tar.gz) = 503eda1702edbe9eb36b162b8ca0da02eac2acfb73140077aa73fb817c3fca47
 SIZE (hashicorp-go-immutable-radix-v1.0.0_GH0.tar.gz) = 19305
 SHA256 (hashicorp-go-metrics-v0.5.4_GH0.tar.gz) = f7646f26c37d299018248f4ee67cf464396b9bec2192389a85c7826575b64560
 SIZE (hashicorp-go-metrics-v0.5.4_GH0.tar.gz) = 44094
 SHA256 (hashicorp-go-msgpack-v2.1.2_GH0.tar.gz) = 3478d2f62f978e36496d849a0d39453acf5ba5fc6624974371b7b58b28a9bb20
 SIZE (hashicorp-go-msgpack-v2.1.2_GH0.tar.gz) = 368768
 SHA256 (hashicorp-go-multierror-v1.1.1_GH0.tar.gz) = 8d1bb3377310e8ffe4c7b5672c5de1eaed153402aebd15d6e5b9673c356a065f
 SIZE (hashicorp-go-multierror-v1.1.1_GH0.tar.gz) = 13803
 SHA256 (hashicorp-go-set-v3.0.1_GH0.tar.gz) = 50f1e93939784da9dea1bf83cd6a3cb74e7deb0bde6c3033a946519a27171e91
 SIZE (hashicorp-go-set-v3.0.1_GH0.tar.gz) = 33109
 SHA256 (hashicorp-golang-lru-v0.5.1_GH0.tar.gz) = 3bf57512af746dc0338651ba1c35c65fe907ff214ccb22d679539f7ea791511e
 SIZE (hashicorp-golang-lru-v0.5.1_GH0.tar.gz) = 12982
 SHA256 (hashicorp-golang-lru-v2.0.7_GH0.tar.gz) = 312697d0bf6e6bb44e66a94b2a8a07955edf89af10b09e69b5a9101d30ad5149
 SIZE (hashicorp-golang-lru-v2.0.7_GH0.tar.gz) = 23860
 SHA256 (hashicorp-raft-v1.7.3_GH0.tar.gz) = 8954aa8f1b88a7bd394d0e7bce2da81b0a8059fcfe5087e7e8b49d53c6446c17
 SIZE (hashicorp-raft-v1.7.3_GH0.tar.gz) = 183129
 SHA256 (imdario-mergo-v1.0.2_GH0.tar.gz) = ea63e957639684b877cecc85570c4e6bfda76315027bf86b61f0084a43482a8e
 SIZE (imdario-mergo-v1.0.2_GH0.tar.gz) = 29096
 SHA256 (inconshreveable-mousetrap-v1.1.0_GH0.tar.gz) = ab23e7c5cbf42564eb0190ee051b7217c04fd2599d2f26e9ebe205db75963141
 SIZE (inconshreveable-mousetrap-v1.1.0_GH0.tar.gz) = 5338
 SHA256 (jackc-pgpassfile-v1.0.0_GH0.tar.gz) = df8904662382e1d0064ec7a5a8c36c49264d7128cea923d597802ada8c5b9603
 SIZE (jackc-pgpassfile-v1.0.0_GH0.tar.gz) = 3254
 SHA256 (jackc-pgservicefile-5a60cdf6a761_GH0.tar.gz) = 26b5ac355f4d22a3f8ba94376038cad6e97033ae4f06f7891339c36c0212f927
 SIZE (jackc-pgservicefile-5a60cdf6a761_GH0.tar.gz) = 3294
 SHA256 (jackc-pgx-v5.9.2_GH0.tar.gz) = 82da906d064f24edc84579b3be6108ee17352bb67b6a71959cd3d232b352a5c7
 SIZE (jackc-pgx-v5.9.2_GH0.tar.gz) = 419614
 SHA256 (jackc-puddle-v2.2.2_GH0.tar.gz) = 15615ff760c55a7024d362fccbbf75646e20235472ab24c8ef94792876f196eb
 SIZE (jackc-puddle-v2.2.2_GH0.tar.gz) = 18943
 SHA256 (johannesboyne-gofakes3-ebf3e50324d3_GH0.tar.gz) = caf333b935f6d1097b22d32015064b0c266140eafd5917ba66960e184b27d74b
 SIZE (johannesboyne-gofakes3-ebf3e50324d3_GH0.tar.gz) = 291179
 SHA256 (jxskiss-base62-v1.1.0_GH0.tar.gz) = 9bd3c73c1d9cf70fc6a738d8d3ace1b6fdebc1607b9e8aabdc8a96e0ed39baf4
 SIZE (jxskiss-base62-v1.1.0_GH0.tar.gz) = 8667
 SHA256 (klauspost-compress-v1.18.2_GH0.tar.gz) = 08d94e493acd70a19ec7010b044a3aba8186aae53f3106d64c91d7ad75a671f6
 SIZE (klauspost-compress-v1.18.2_GH0.tar.gz) = 39076656
 SHA256 (klauspost-cpuid-v2.3.0_GH0.tar.gz) = 467c058227b86d527bff7e2e1504748f99ca27cb69f3908189ceb18b1df8428a
 SIZE (klauspost-cpuid-v2.3.0_GH0.tar.gz) = 803471
 SHA256 (kr-pretty-v0.3.1_GH0.tar.gz) = e6fa7db2708320e66a1645bf6b234e524e73f4163ca0519b8608616e48f5d206
 SIZE (kr-pretty-v0.3.1_GH0.tar.gz) = 10227
 SHA256 (kr-text-v0.2.0_GH0.tar.gz) = 59b5e4a7fd4097be87fad0edcaf342fdc971d0c8fdfb4f2d7424561471992e7c
 SIZE (kr-text-v0.2.0_GH0.tar.gz) = 8699
 SHA256 (kralicky-go-adaptive-radix-tree-330eb762e74c_GH0.tar.gz) = 6a6ae17ee1bdd6fafb0b2137049ff5659de14699af11fd367deb020787c02dc3
 SIZE (kralicky-go-adaptive-radix-tree-330eb762e74c_GH0.tar.gz) = 2929415
 SHA256 (kubernetes-sigs-yaml-v1.6.0_GH0.tar.gz) = a6c9c723642ed54ef74dab20c4158b6cef0f3f2afca34c1b402c1e5852b1720b
 SIZE (kubernetes-sigs-yaml-v1.6.0_GH0.tar.gz) = 50717
 SHA256 (lestrrat-go-blackmagic-v1.0.4_GH0.tar.gz) = 42d4353dd4d4879ab5c3a4d42bc406d29f6c5c33b15b4ec20b287db94da21e0c
 SIZE (lestrrat-go-blackmagic-v1.0.4_GH0.tar.gz) = 4716
 SHA256 (lestrrat-go-dsig-secp256k1-v1.0.0_GH0.tar.gz) = f9ecd5ef14ec21f7f4984f317544c9a24bee448c195df135bb1d78de659868b0
 SIZE (lestrrat-go-dsig-secp256k1-v1.0.0_GH0.tar.gz) = 3136
 SHA256 (lestrrat-go-dsig-v1.0.0_GH0.tar.gz) = b1a151c8bc3a89ba0bffb4af75bcbee3d209cb0b1b7e89ff0d7ed472cf1da333
 SIZE (lestrrat-go-dsig-v1.0.0_GH0.tar.gz) = 16783
 SHA256 (lestrrat-go-httpcc-v1.0.1_GH0.tar.gz) = 40740483a7ff2070dd7957be7513498d7e4a080bea2128159fc3f160803dae41
 SIZE (lestrrat-go-httpcc-v1.0.1_GH0.tar.gz) = 6153
 SHA256 (lestrrat-go-httprc-v3.0.1_GH0.tar.gz) = d6ea191746d76b060c96cb23278111de469f1c023bb28f3476446d62bb933b14
 SIZE (lestrrat-go-httprc-v3.0.1_GH0.tar.gz) = 35453
 SHA256 (lestrrat-go-jwx-v3.0.12_GH0.tar.gz) = 27ed243adbe8cb2caccb3a7172de955f50f6322c3e4d6210bc525a83d3e1b76a
 SIZE (lestrrat-go-jwx-v3.0.12_GH0.tar.gz) = 544380
 SHA256 (lestrrat-go-option-v1.0.1_GH0.tar.gz) = 2cd876f51cb7b721b184a26950ed6624c5e287fdb41ddad473284339aa0ee2cc
 SIZE (lestrrat-go-option-v1.0.1_GH0.tar.gz) = 10576
 SHA256 (lestrrat-go-option-v2.0.0_GH0.tar.gz) = aa5a15220481004a12841384feac3e130b3a4b93e0517b6c6c8305cf953f1b56
 SIZE (lestrrat-go-option-v2.0.0_GH0.tar.gz) = 11939
 SHA256 (libdns-libdns-v1.1.1_GH0.tar.gz) = 61213e3e226f31c5a3cff5c8458da782e08e4841eaab474ee3f79d27817cb7e9
 SIZE (libdns-libdns-v1.1.1_GH0.tar.gz) = 20518
 SHA256 (libp2p-go-reuseport-v0.4.0_GH0.tar.gz) = 9145b8b7cd3c6554544024d07331f678c7da7b1898123cbe60d899141bdc5f23
 SIZE (libp2p-go-reuseport-v0.4.0_GH0.tar.gz) = 4756
 SHA256 (lucasb-eyer-go-colorful-v1.3.0_GH0.tar.gz) = 77d79d5ccb3c4fe85a44827e2c7ecd1b2d60a6e1eea3f9a0ce4343a517281309
 SIZE (lucasb-eyer-go-colorful-v1.3.0_GH0.tar.gz) = 982343
 SHA256 (lufia-plan9stats-fba389f38bae_GH0.tar.gz) = 81344b63da295cb471304f6ed31c623a8a0fd664eff390206e16219c933487a1
 SIZE (lufia-plan9stats-fba389f38bae_GH0.tar.gz) = 10922
 SHA256 (magiconair-properties-v1.8.10_GH0.tar.gz) = 0992d837b22e0381f315c55ac2a106d5557955e28b9ce10c9630a0a275ffb63a
 SIZE (magiconair-properties-v1.8.10_GH0.tar.gz) = 29091
 SHA256 (martinlindhe-base36-v1.1.1_GH0.tar.gz) = 2348dc28365d9299d980c32f85ffa656589e1339637c1eac505ad61e48d78f20
 SIZE (martinlindhe-base36-v1.1.1_GH0.tar.gz) = 4215
 SHA256 (mattn-go-colorable-v0.1.14_GH0.tar.gz) = 293966a59f0238da3c39f5b27c192d0efd6473ff74ab5a9c7e1ec73fdda3f1d4
 SIZE (mattn-go-colorable-v0.1.14_GH0.tar.gz) = 9800
 SHA256 (mattn-go-isatty-v0.0.20_GH0.tar.gz) = 18fc42a278e60fb7a1dffa72f20539ae88d0e292db55b513ef514b7d369883a6
 SIZE (mattn-go-isatty-v0.0.20_GH0.tar.gz) = 4713
 SHA256 (mattn-go-runewidth-v0.0.19_GH0.tar.gz) = 10ff9a1542c868d1609277c1b890a163a80f1835fdba33fde65f1d2d470c2400
 SIZE (mattn-go-runewidth-v0.0.19_GH0.tar.gz) = 20551
 SHA256 (mholt-acmez-v3.1.4_GH0.tar.gz) = fbdc2a4a16c72501515ae8d6ab6273527032ebd6e700ef496c1ee621dd6bf43b
 SIZE (mholt-acmez-v3.1.4_GH0.tar.gz) = 64783
 SHA256 (miekg-dns-v1.1.69_GH0.tar.gz) = c3cadd03ccf722571215c2105cd9fc63304c9b49356d771fd2ca336ac95b882a
 SIZE (miekg-dns-v1.1.69_GH0.tar.gz) = 223670
 SHA256 (minio-minlz-87eb42fe8882_GH0.tar.gz) = 7f8a00b9795b1af88b7570f9fd082c7027886abfa141bc6ec4f1cc39a4a84ba1
 SIZE (minio-minlz-87eb42fe8882_GH0.tar.gz) = 14436288
 SHA256 (mitchellh-hashstructure-v2.0.2_GH0.tar.gz) = 3c6781f06d145547a3f08e365ee43c8c47b24d89baf1bc61bc971910f7fe4bbc
 SIZE (mitchellh-hashstructure-v2.0.2_GH0.tar.gz) = 9004
 SHA256 (moby-docker-image-spec-v1.3.1_GH0.tar.gz) = 64d792e78c099b90194d18281dcbb45d7ef5edde5ebbdf39978436d1e57b829e
 SIZE (moby-docker-image-spec-v1.3.1_GH0.tar.gz) = 14090
 SHA256 (moby-go-archive-v0.1.0_GH0.tar.gz) = bd34aea91df9b05d404a2c473c261b54e3f723053e55aad0d0e11f5f90a94c74
 SIZE (moby-go-archive-v0.1.0_GH0.tar.gz) = 82141
 SHA256 (moby-moby-v28.5.2_GH0.tar.gz) = 0e450c03c536a1304ba8fd26ca4c4ff96fac62182fd042fec90ffdf4a0969d40
 SIZE (moby-moby-v28.5.2_GH0.tar.gz) = 18070632
 SHA256 (moby-patternmatcher-v0.6.0_GH0.tar.gz) = 66f5de58f576d03b119ad77fbe538bdc54d16235b1c8400209965a5d77bdf5ce
 SIZE (moby-patternmatcher-v0.6.0_GH0.tar.gz) = 12265
 SHA256 (moby-sys-user-v0.4.0_GH0.tar.gz) = d2ac572f7c1fe57838298c724a084287341836e906c6f1d3080c053da05021b0
 SIZE (moby-sys-user-v0.4.0_GH0.tar.gz) = 93170
 SHA256 (moby-sys-sequential-v0.6.0_GH0.tar.gz) = 69582aa7672aed219b5b6f4c732c6c1fbe63612e5ab1301b8ad74e955b6cfed9
 SIZE (moby-sys-sequential-v0.6.0_GH0.tar.gz) = 69156
 SHA256 (moby-sys-userns-v0.1.0_GH0.tar.gz) = 9caafb9a772df5fe3b9d9fad0102c24ffac5ad0ef04fb9b5077c372bcafab4ae
 SIZE (moby-sys-userns-v0.1.0_GH0.tar.gz) = 70560
 SHA256 (moby-term-v0.5.2_GH0.tar.gz) = 59e529a9312d119489e081dd1ac56fc3e27ff4e4a7ea4df49430261aa570f472
 SIZE (moby-term-v0.5.2_GH0.tar.gz) = 15633
 SHA256 (modelcontextprotocol-go-sdk-v1.4.1_GH0.tar.gz) = 3b23e9c56cf0577dc4164f92f1bab1850778e1145a309ba6c21b58915e00af86
 SIZE (modelcontextprotocol-go-sdk-v1.4.1_GH0.tar.gz) = 375597
 SHA256 (morikuni-aec-v1.1.0_GH0.tar.gz) = 87f4fe8f7bdcf86ea94d89d993640adaff83302b71fbdfe88a252ec67794111b
 SIZE (morikuni-aec-v1.1.0_GH0.tar.gz) = 55541
 SHA256 (muesli-cancelreader-v0.2.2_GH0.tar.gz) = afd827ad56d7c567389a516ca005ea80d46ed1cbc17c5ec3ca144152f1ecfc5a
 SIZE (muesli-cancelreader-v0.2.2_GH0.tar.gz) = 9443
 SHA256 (muesli-termenv-v0.16.0_GH0.tar.gz) = 2a65e544c8757ce90669d1ec3e1e61b469d72dafb086e9d114961dc75632f210
 SIZE (muesli-termenv-v0.16.0_GH0.tar.gz) = 422973
 SHA256 (munnerz-goautoneg-a7dc8b61c822_GH0.tar.gz) = 3a455e3bcf8237ecee0385f97223ca821ec2547284e827e90f94a4984801ca1c
 SIZE (munnerz-goautoneg-a7dc8b61c822_GH0.tar.gz) = 2810
 SHA256 (natefinch-atomic-v1.0.1_GH0.tar.gz) = 4027dfa69d6ef36b20666ee3bf646d399041c4ddd0da5164f8ef0cae4a849eb0
 SIZE (natefinch-atomic-v1.0.1_GH0.tar.gz) = 3176
 SHA256 (oapi-codegen-runtime-v1.1.2_GH0.tar.gz) = b780bd5d8b4ebda1ebd57e0752973168a766133e548725f2deb49c92cd11fdf2
 SIZE (oapi-codegen-runtime-v1.1.2_GH0.tar.gz) = 45527
 SHA256 (onsi-ginkgo-v1.16.5_GH0.tar.gz) = 0380c81321b764b75e76a7aa8fc8ab1ab361232a88d5b6124ef8b9a9e75d5287
 SIZE (onsi-ginkgo-v1.16.5_GH0.tar.gz) = 164965
 SHA256 (open-policy-agent-opa-v1.12.1_GH0.tar.gz) = 52dbb092c56102fff61bb920d441e8b4f578f504ed087008015a9ae577d03caa
 SIZE (open-policy-agent-opa-v1.12.1_GH0.tar.gz) = 20514844
 SHA256 (open-telemetry-opentelemetry-go-contrib-detectors-gcp-v1.39.0_GH0.tar.gz) = 226e02872e29d9d4cec6f937b0525d157b3496efbee1def096113e9d3a2dc46c
 SIZE (open-telemetry-opentelemetry-go-contrib-detectors-gcp-v1.39.0_GH0.tar.gz) = 769509
-SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.64.0_GH0.tar.gz) = c4a542d5a7b25ab8c1055539931f96e5dc52e42356729e471164b3ce670345e1
-SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.64.0_GH0.tar.gz) = 768582
-SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.64.0_GH0.tar.gz) = 8c1894cf42fdd29c1f156fad38b95fc8e147fc563b689b956a4327f20010fa9d
-SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.64.0_GH0.tar.gz) = 769389
-SHA256 (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.64.0_GH0.tar.gz) = f0e39fe2532d3c285ac1a4581040343d23272289cfe2ebe49fd881078aa1a7a3
-SIZE (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.64.0_GH0.tar.gz) = 769549
+SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.68.0_GH0.tar.gz) = b3d7ea4bc31fa1be9848cf534dc3887734ec7fa80298c95aa97f3ccc5a24d962
+SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.68.0_GH0.tar.gz) = 836045
+SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.68.0_GH0.tar.gz) = 4ad91b08b6700d5803e5758a0bed12223abe7c5c8442d83ffb5abd39b11e33a1
+SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.68.0_GH0.tar.gz) = 838032
+SHA256 (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.68.0_GH0.tar.gz) = fca863897676aa4c3b8810b26fe66a464dd9ac53844d0a0ed91894049cde4e06
+SIZE (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.68.0_GH0.tar.gz) = 837749
 SHA256 (open-telemetry-opentelemetry-go-instrumentation-sdk-v1.2.1_GH0.tar.gz) = 7556703696704f18af8de85e4b545cd7e92329ecfd98d11bf4bcb700497d9192
 SIZE (open-telemetry-opentelemetry-go-instrumentation-sdk-v1.2.1_GH0.tar.gz) = 1876442
-SHA256 (open-telemetry-opentelemetry-go-v1.40.0_GH0.tar.gz) = 1c3432b6ed2c6499ebda757388698ce82b435812d92faef221e3682f1a5cddfb
-SIZE (open-telemetry-opentelemetry-go-v1.40.0_GH0.tar.gz) = 3490904
-SHA256 (open-telemetry-opentelemetry-proto-go-v1.9.0_GH0.tar.gz) = 87b9d9dab8f5f4ceae467fe7c277cac4804621d052e39b82c06ff96b54c9961e
-SIZE (open-telemetry-opentelemetry-proto-go-v1.9.0_GH0.tar.gz) = 150753
+SHA256 (open-telemetry-opentelemetry-go-v1.43.0_GH0.tar.gz) = f8ce59f6705b718114124b234a5761a9e9141261faa9b31d4a2a86b14e988e52
+SIZE (open-telemetry-opentelemetry-go-v1.43.0_GH0.tar.gz) = 3727029
+SHA256 (open-telemetry-opentelemetry-proto-go-v1.10.0_GH0.tar.gz) = 2d39f83c69410c481293b005abfc2c2b259b1281179687099384aa948666d501
+SIZE (open-telemetry-opentelemetry-proto-go-v1.10.0_GH0.tar.gz) = 153463
 SHA256 (opencontainers-go-digest-v1.0.0_GH0.tar.gz) = 1e74706d265c92f62793af741e322163f3c08afa66f5a7926c9b9ccb44fed230
 SIZE (opencontainers-go-digest-v1.0.0_GH0.tar.gz) = 24456
 SHA256 (opencontainers-image-spec-v1.1.1_GH0.tar.gz) = fff64f2ae3a11a307227d27ba599f1e56b436301c5a2faedd57907ac97d2ac94
 SIZE (opencontainers-image-spec-v1.1.1_GH0.tar.gz) = 160340
 SHA256 (pelletier-go-toml-v2.2.4_GH0.tar.gz) = d7bb392de6c9b6eedd23e5e05e7cd730822afa02b85ca6a69c9313638a945a24
 SIZE (pelletier-go-toml-v2.2.4_GH0.tar.gz) = 910332
 SHA256 (peterbourgon-ff-v3.4.0_GH0.tar.gz) = 499c5c5e259323e070976b5233b9104955df92fb7641c2c957f906aff1bf9057
 SIZE (peterbourgon-ff-v3.4.0_GH0.tar.gz) = 30970
 SHA256 (pierrec-lz4-v4.1.21_GH0.tar.gz) = 8b8d3f7b3fe39ce4ae117b45949d6dbb9c496e719d87a2d7c2ce33ad0228e53a
 SIZE (pierrec-lz4-v4.1.21_GH0.tar.gz) = 40916350
 SHA256 (pires-go-proxyproto-v0.8.1_GH0.tar.gz) = d2cb3aafd66628e17b76723049509be152d8cce8ccb62fca5c41743031b70672
 SIZE (pires-go-proxyproto-v0.8.1_GH0.tar.gz) = 44411
 SHA256 (pkg-errors-v0.9.1_GH0.tar.gz) = 56bfd893023daa498508bfe161de1be83299fcf15376035e7df79cbd7d6fa608
 SIZE (pkg-errors-v0.9.1_GH0.tar.gz) = 13415
 SHA256 (planetscale-vtprotobuf-0393e58bdf10_GH0.tar.gz) = 29f20dbac4e56fb9a53a02da7bae8ef2449a464e4a31707e08bf2bb4461a1c53
 SIZE (planetscale-vtprotobuf-0393e58bdf10_GH0.tar.gz) = 223356
 SHA256 (pmezard-go-difflib-5d4384ee4fb2_GH0.tar.gz) = 8574a5cbc435057352a17ff9e6ad40190f3b9d623cd9ab0cdfa6c1d8f0bea0b2
 SIZE (pmezard-go-difflib-5d4384ee4fb2_GH0.tar.gz) = 11395
 SHA256 (pomerium-datasource-1f58110d0e17_GH0.tar.gz) = 0b17bf2fa93f76b8b676215d32461de1f799abdc999ec94f470d16b935ed3341
 SIZE (pomerium-datasource-1f58110d0e17_GH0.tar.gz) = 411602
-SHA256 (pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 32403b027c0970e328e6746a166c166d5eb7b8ea331dabecb73591650921f683
-SIZE (pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 368293
+SHA256 (pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = b16b4fdcf7f5990f73c3097b972c3fc0c5d4045736e65b6f768cfab2e8761400
+SIZE (pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = 368288
 SHA256 (pomerium-protoutil-19d2ae5b7518_GH0.tar.gz) = 5dd6d5e0b691a5a21a2961c4d12a2afbbfc4e186cea48ae4b93271d31e748bd9
 SIZE (pomerium-protoutil-19d2ae5b7518_GH0.tar.gz) = 53474
 SHA256 (pomerium-webauthn-d32e028c3f7e_GH0.tar.gz) = 7781a322aa9927a715e14c9e55e7b22b5087db6a1493eab26a20049e347f011d
 SIZE (pomerium-webauthn-d32e028c3f7e_GH0.tar.gz) = 111882
 SHA256 (power-devops-perfstat-82ca36839d55_GH0.tar.gz) = 7147f950cf6a08f8c153cba5c85f1b18488e3fc49edd32356e13b1bc85f50fa2
 SIZE (power-devops-perfstat-82ca36839d55_GH0.tar.gz) = 37874
 SHA256 (prometheus-client_golang-v1.23.2_GH0.tar.gz) = 427df6d268825ccc84d4950d2e6388fc2bbde1fdc3e9f89bcd1e0c5561189219
 SIZE (prometheus-client_golang-v1.23.2_GH0.tar.gz) = 1130358
 SHA256 (prometheus-client_model-v0.6.2_GH0.tar.gz) = 47c5ea7949f68e7f7b344350c59b6bd31eeb921f0eec6c3a566e27cf1951470c
 SIZE (prometheus-client_model-v0.6.2_GH0.tar.gz) = 17508
 SHA256 (prometheus-common-v0.67.5_GH0.tar.gz) = 3e9d4be0e970dcf186fa5bd814afc4fbd7fd435e6749edcde8dcb8d5e6cc3daa
 SIZE (prometheus-common-v0.67.5_GH0.tar.gz) = 161241
 SHA256 (prometheus-otlptranslator-v1.0.0_GH0.tar.gz) = 51efc9ed3e61af4192331dba2942bd6f919cc7af4b31c093c19e18d5ea8f3af1
 SIZE (prometheus-otlptranslator-v1.0.0_GH0.tar.gz) = 21689
-SHA256 (prometheus-procfs-v0.19.2_GH0.tar.gz) = 4baea25247b086587a51683a8492a9c71fbcef3e86ca68ae586f179ede9af940
-SIZE (prometheus-procfs-v0.19.2_GH0.tar.gz) = 271093
+SHA256 (prometheus-procfs-v0.20.1_GH0.tar.gz) = 1a8aa841f1e7df438f05302fce5ec5ab320a41b691cb1346cd20059bf89cb59e
+SIZE (prometheus-procfs-v0.20.1_GH0.tar.gz) = 279208
 SHA256 (prometheus-statsd_exporter-v0.22.7_GH0.tar.gz) = b90c39a0382c079abce26490132df21b9500a8d59402e4d9eec79358619d05d8
 SIZE (prometheus-statsd_exporter-v0.22.7_GH0.tar.gz) = 129312
 SHA256 (protocolbuffers-protobuf-go-v1.36.11_GH0.tar.gz) = 517b935001f3d43640489cd1aab531a3ed5927fb34379fa6cb1c1a514e9cb8e8
 SIZE (protocolbuffers-protobuf-go-v1.36.11_GH0.tar.gz) = 1821632
 SHA256 (quic-go-qpack-v0.6.0_GH0.tar.gz) = 7ee72877bf4d2b3faf47cf7c7c191a80a6211010ef22b3bbb817c57deac30651
 SIZE (quic-go-qpack-v0.6.0_GH0.tar.gz) = 41319
 SHA256 (quic-go-quic-go-v0.58.0_GH0.tar.gz) = 860c4cf29b4cf21ce78c14d5e0492b99d534f5788846bc82050476a9e47502cc
 SIZE (quic-go-quic-go-v0.58.0_GH0.tar.gz) = 713031
 SHA256 (rcrowley-go-metrics-65e299d6c5c9_GH0.tar.gz) = c0436bb8e5d30aa9d13717b873e9bf1b5f27e211ee17272643d88d08645f8a43
 SIZE (rcrowley-go-metrics-65e299d6c5c9_GH0.tar.gz) = 37746
 SHA256 (rivo-uniseg-v0.4.7_GH0.tar.gz) = dc7aedce4a8c174b01df8406ff7d92779e2df76cee2ad17fa2ff6777feddadec
 SIZE (rivo-uniseg-v0.4.7_GH0.tar.gz) = 458088
 SHA256 (rogpeppe-go-internal-v1.14.1_GH0.tar.gz) = 7e54f6d0f002a4904f150e29417515b286ff3b0bbde8e1a01082cbb5178132cb
 SIZE (rogpeppe-go-internal-v1.14.1_GH0.tar.gz) = 116418
 SHA256 (rs-cors-v1.11.1_GH0.tar.gz) = 9dfa637cfee4547e7bd30b8216cb89de3a41e485ff19e63172b509e407f519cb
 SIZE (rs-cors-v1.11.1_GH0.tar.gz) = 35088
 SHA256 (rs-zerolog-v1.34.0_GH0.tar.gz) = 7a658d16b365f28fc6b75ae4ea2948cbe39e8fdaaadd0b5e92a6d911703ba430
 SIZE (rs-zerolog-v1.34.0_GH0.tar.gz) = 217720
 SHA256 (ryszard-goskiplist-2dfbae5fcf46_GH0.tar.gz) = 7749ec2dc1d5c16fbefc70080357ee123e6b25210cebce40e66bfa1a3cc6dc01
 SIZE (ryszard-goskiplist-2dfbae5fcf46_GH0.tar.gz) = 13876
 SHA256 (sagikazarmark-locafero-v0.11.0_GH0.tar.gz) = 97f079e8863594d56a7e35a2f20e8f24a72aba4ee55d1461f51203d3c7d8e199
 SIZE (sagikazarmark-locafero-v0.11.0_GH0.tar.gz) = 10101
 SHA256 (sahilm-fuzzy-v0.1.1_GH0.tar.gz) = 3242679be224552ef8934524cb08bb5d355644084a3476509bedd4dba57af408
 SIZE (sahilm-fuzzy-v0.1.1_GH0.tar.gz) = 3353368
 SHA256 (segmentio-asm-v1.2.1_GH0.tar.gz) = 47bd144ee60642b19a0118143005038e4ce5009f8e90e3ec168a257099ac887d
 SIZE (segmentio-asm-v1.2.1_GH0.tar.gz) = 92681
 SHA256 (segmentio-encoding-v0.5.4_GH0.tar.gz) = 879ed211c5574c16a226a34c36d20c72072850b0661463a596d208a3e39ce6e6
 SIZE (segmentio-encoding-v0.5.4_GH0.tar.gz) = 13807322
 SHA256 (shirou-gopsutil-v3.24.5_GH0.tar.gz) = c4c61a6ade378e39b89a33bb959fc2c32092f0ba35f39aec99519fad4e9173b4
 SIZE (shirou-gopsutil-v3.24.5_GH0.tar.gz) = 185811
 SHA256 (shirou-gopsutil-v4.25.6_GH0.tar.gz) = bd5869af7348897690d951d6f4f9b2eff9520d8b86d6a3d4bcd9251d44cadcba
 SIZE (shirou-gopsutil-v4.25.6_GH0.tar.gz) = 192454
 SHA256 (shoenig-go-m1cpu-v0.1.6_GH0.tar.gz) = 80a4292edf006308f82222b842195c785fbdc7fddaee09698b403c13612590ed
 SIZE (shoenig-go-m1cpu-v0.1.6_GH0.tar.gz) = 9786
 SHA256 (shogo82148-go-sfv-v0.3.3_GH0.tar.gz) = 1256c8297aa1647d33d91917a91c68e15988addbbf07ed133a3c528d8727eb95
 SIZE (shogo82148-go-sfv-v0.3.3_GH0.tar.gz) = 75899
 SHA256 (sirupsen-logrus-dd1b4c2e81af_GH0.tar.gz) = 7faa1fed4272563e857b420ab69f20219ed91af6a982c33f6ebb3df3289feaca
 SIZE (sirupsen-logrus-dd1b4c2e81af_GH0.tar.gz) = 50606
 SHA256 (sourcegraph-conc-5f936abd7ae8_GH0.tar.gz) = f71d011f609f73f09ab88e7f639ffd2bf4df3534d78649c539a7ffe904f5739d
 SIZE (sourcegraph-conc-5f936abd7ae8_GH0.tar.gz) = 24944
 SHA256 (spf13-afero-v1.15.0_GH0.tar.gz) = 80f04709b4c8f9d9a3e1dfafd0587092dfae3bbe11d907c23d43160d161bd855
 SIZE (spf13-afero-v1.15.0_GH0.tar.gz) = 95837
 SHA256 (spf13-cast-v1.10.0_GH0.tar.gz) = d62a9b81da805574153b14c9defb1d817f71fb9ebb5b6d20e8859b3029170a38
 SIZE (spf13-cast-v1.10.0_GH0.tar.gz) = 24170
 SHA256 (spf13-cobra-v1.10.2_GH0.tar.gz) = 8ee67b82ddb730f6ed639724d19ddd874be36b65da45529ad5cacce53c310704
 SIZE (spf13-cobra-v1.10.2_GH0.tar.gz) = 201437
 SHA256 (spf13-pflag-v1.0.10_GH0.tar.gz) = 3d69f6fc641f43f3cb7bc309d083da7ca2110d11c0bbcec5d4c01036e884014f
 SIZE (spf13-pflag-v1.0.10_GH0.tar.gz) = 63154
 SHA256 (spf13-viper-v1.21.0_GH0.tar.gz) = 20117b2c3e4f3b0594c39ad7c4df61ab7e0acdf5e51202a8b8c72393ebce0723
 SIZE (spf13-viper-v1.21.0_GH0.tar.gz) = 121982
 SHA256 (spiffe-go-spiffe-v2.6.0_GH0.tar.gz) = 3eb3fc58ee4c038c3074593ad8ae7a44e51141edaa7c981081d134f601bdb169
 SIZE (spiffe-go-spiffe-v2.6.0_GH0.tar.gz) = 124719
 SHA256 (sryoya-protorand-e7440656b2a4_GH0.tar.gz) = 315ef183f9a60df74527ff70cf3d3ec31afbff51111c2d550c42c4810cbd9b2c
 SIZE (sryoya-protorand-e7440656b2a4_GH0.tar.gz) = 11071
 SHA256 (stoewer-go-strcase-v1.3.1_GH0.tar.gz) = b9a70676f82b27a6b4de8e5eeae77dbd2e68afb3d9610b88be56fb68cadb612a
 SIZE (stoewer-go-strcase-v1.3.1_GH0.tar.gz) = 5785
 SHA256 (stretchr-objx-v0.5.2_GH0.tar.gz) = c21c81a2e619fe8194c9cfafd577a72fe163df5a384d68799fbc54eef4b0e33f
 SIZE (stretchr-objx-v0.5.2_GH0.tar.gz) = 33222
 SHA256 (stretchr-testify-v1.11.1_GH0.tar.gz) = 4b51fbc0f19e42841013748e6d527314e1d0e7255122766b5fca1d35b4630c69
 SIZE (stretchr-testify-v1.11.1_GH0.tar.gz) = 116832
 SHA256 (subosito-gotenv-v1.6.0_GH0.tar.gz) = 51a5a8e36f30ddd97866779e93c4e93b0d4958a60fabd1d17fc2226bfe7823db
 SIZE (subosito-gotenv-v1.6.0_GH0.tar.gz) = 11470
 SHA256 (tchap-go-patricia-v2.3.3_GH0.tar.gz) = 77072a4ac0274f76de642c5678e92c7af3ee6d61b96e77ce0dbb78fa2cebf012
 SIZE (tchap-go-patricia-v2.3.3_GH0.tar.gz) = 12605
 SHA256 (testcontainers-testcontainers-go-v0.40.0_GH0.tar.gz) = 3a294f8f9ee83faee34e128c2afade76538c13e4d06f67510849f4ad152a144c
 SIZE (testcontainers-testcontainers-go-v0.40.0_GH0.tar.gz) = 20858111
 SHA256 (tidwall-gjson-v1.18.0_GH0.tar.gz) = d8584d27c2bad03a07a9ed8190e3e0e5d66745a591fc51c30b6e0ac6669cc304
 SIZE (tidwall-gjson-v1.18.0_GH0.tar.gz) = 74233
 SHA256 (tidwall-match-v1.1.1_GH0.tar.gz) = 1fc2ff17ecdd82c7ba739b4f373b9df731a8e42517c70285c8bbf24dd9b3f2f0
 SIZE (tidwall-match-v1.1.1_GH0.tar.gz) = 5931
 SHA256 (tidwall-pretty-v1.2.0_GH0.tar.gz) = fda514a386aff71cf7a4639a8fb8e1133bf8f583eba902b3c844a176401fad7d
 SIZE (tidwall-pretty-v1.2.0_GH0.tar.gz) = 11224
 SHA256 (tklauser-go-sysconf-v0.3.14_GH0.tar.gz) = 764c5475b88b96f2fc0f1f7938cc093220483143984db386f04368fe146542a5
 SIZE (tklauser-go-sysconf-v0.3.14_GH0.tar.gz) = 30495
 SHA256 (tklauser-numcpus-v0.8.0_GH0.tar.gz) = 93e9491d6291c7aa803c59c81c7ed6a8b98d435bceb1374147566f89dd33acba
 SIZE (tklauser-numcpus-v0.8.0_GH0.tar.gz) = 9448
 SHA256 (tniswong-go.rfcx-07783c52761f_GH0.tar.gz) = c388f9031357e16fb08ec3cc227bd595d6cb554d22aef2375a2637425c12623c
 SIZE (tniswong-go.rfcx-07783c52761f_GH0.tar.gz) = 19575
 SHA256 (uber-go-automaxprocs-v1.6.0_GH0.tar.gz) = fb750295e270f668502fb139ff626bf5209033c7893b29521238cd04502e55cf
 SIZE (uber-go-automaxprocs-v1.6.0_GH0.tar.gz) = 24465
 SHA256 (uber-go-mock-v0.6.0_GH0.tar.gz) = e315da02f11069f4e9688054cf8dba86535318ea28ab7a2fe144c5e6a859e329
 SIZE (uber-go-mock-v0.6.0_GH0.tar.gz) = 115148
 SHA256 (uber-go-multierr-v1.11.0_GH0.tar.gz) = 8aa599cf7de733306cf8770f854f8a38e6c819b1ae4296f15e44b1e7c6698f34
 SIZE (uber-go-multierr-v1.11.0_GH0.tar.gz) = 16900
 SHA256 (uber-go-zap-v1.27.1_GH0.tar.gz) = 772019ee25101643463bc47aa2386806da5c181e5c1fc8066224f5f95ec7def5
 SIZE (uber-go-zap-v1.27.1_GH0.tar.gz) = 269171
 SHA256 (uber-go-zap-exp-v0.3.0_GH0.tar.gz) = 13e1fd59bf2f37efe2ad0f10b95d1c9e0afd2f95e08d652e7e532539901452f1
 SIZE (uber-go-zap-exp-v0.3.0_GH0.tar.gz) = 273078
 SHA256 (valyala-fastjson-v1.6.4_GH0.tar.gz) = c4a745d3e3f49ca7db245215fa0ce0f563f6feab0457e3a399324618cad7d5c6
 SIZE (valyala-fastjson-v1.6.4_GH0.tar.gz) = 731429
 SHA256 (vektah-gqlparser-v2.5.31_GH0.tar.gz) = 8bf0080dc576d3b69ec0ea9569c1d3f127e5ee4fcc9f2dd4abb03e8d8f63a455
 SIZE (vektah-gqlparser-v2.5.31_GH0.tar.gz) = 179133
 SHA256 (volatiletech-null-v9.0.0_GH0.tar.gz) = 838606f8299c1e76600a926f4bd529cd9cda254a4cb5d145386bd543b428969b
 SIZE (volatiletech-null-v9.0.0_GH0.tar.gz) = 24057
 SHA256 (weastur-hclog-zerolog-v1.0.0_GH0.tar.gz) = 6d74bf5b6b12aaf1c625babca98932048796d575d8a291dd722ce70faf3f285b
 SIZE (weastur-hclog-zerolog-v1.0.0_GH0.tar.gz) = 28269
 SHA256 (x448-float16-v0.8.4_GH0.tar.gz) = 2f8f03b3d972f14e1a5a33bab5d1539174e46c696bc91c5b8ac6d7f9036dde15
 SIZE (x448-float16-v0.8.4_GH0.tar.gz) = 13098
 SHA256 (xeipuuv-gojsonpointer-02993c407bfb_GH0.tar.gz) = 36e17c61a2a9384cfdaa1817327f368a1eec66722a7c72ce26abcf8e36ace446
 SIZE (xeipuuv-gojsonpointer-02993c407bfb_GH0.tar.gz) = 7698
 SHA256 (xeipuuv-gojsonreference-bd5ef7bd5415_GH0.tar.gz) = f99765bc8692e620f8abc3f36e10df36a4161c5634505632599ce88abc2d8f55
 SIZE (xeipuuv-gojsonreference-bd5ef7bd5415_GH0.tar.gz) = 6958
 SHA256 (xo-terminfo-abceb7e1c41e_GH0.tar.gz) = f309fc85594b3a03d622ebe275a841b97101c4189f85fff18fc051a2e5a4878c
 SIZE (xo-terminfo-abceb7e1c41e_GH0.tar.gz) = 35180
-SHA256 (yaml-go-yaml-v2.4.3_GH0.tar.gz) = bfd8a614fbceeccd1e24f6775a054581aa27b3ca32fa381c67a0a5b4d7a9c028
-SIZE (yaml-go-yaml-v2.4.3_GH0.tar.gz) = 73305
+SHA256 (yaml-go-yaml-v2.4.4_GH0.tar.gz) = e80715d6f56fd2d9bdf1bb3c1024bddfd819cd4facb4af6d59d14d4cfa2aa1f9
+SIZE (yaml-go-yaml-v2.4.4_GH0.tar.gz) = 73818
 SHA256 (yaml-go-yaml-v3.0.4_GH0.tar.gz) = 1b3eeb663eb0c09b462dc3383fccc99164fab8f6818a7046336f2fe2c45c764b
 SIZE (yaml-go-yaml-v3.0.4_GH0.tar.gz) = 92661
 SHA256 (yashtewari-glob-intersection-v0.2.0_GH0.tar.gz) = 50a02dcb565612b9f41814f0f87305e36986163709b0b7c429654b7030d98c7f
 SIZE (yashtewari-glob-intersection-v0.2.0_GH0.tar.gz) = 12922
 SHA256 (yosida95-uritemplate-v3.0.2_GH0.tar.gz) = 7421e5ed342a20a7eec91139de06cf91157e8f4267bdd61d7d94ae746873145a
 SIZE (yosida95-uritemplate-v3.0.2_GH0.tar.gz) = 13388
 SHA256 (yuin-gopher-lua-v1.1.1_GH0.tar.gz) = 9e706d96c11314a4b3e2034eb10726e48cc7e7e7e31d4765a675f901ee6a9a7e
 SIZE (yuin-gopher-lua-v1.1.1_GH0.tar.gz) = 170691
 SHA256 (yusufpapurcu-wmi-v1.2.4_GH0.tar.gz) = c7bb668db5dffd97ade4076acd361d21912525d22fd5608c8689191f4b7d5e26
 SIZE (yusufpapurcu-wmi-v1.2.4_GH0.tar.gz) = 12659
 SHA256 (zeebo-assert-v1.3.1_GH0.tar.gz) = 1cdf6f5e2448dd4f7892c504d9dc89e31e13c3904b340c5aebf9d68d39729d78
 SIZE (zeebo-assert-v1.3.1_GH0.tar.gz) = 5034
 SHA256 (zeebo-blake3-v0.2.4_GH0.tar.gz) = 382191dfcc6086b8a4679b98ad365c1bfb9674cf9fe2142b049f4c82cc240d51
 SIZE (zeebo-blake3-v0.2.4_GH0.tar.gz) = 112040
 SHA256 (zeebo-xxh3-v1.0.2_GH0.tar.gz) = d488743971995e562623d49603256814e2b5162d9c419dab8c99583fc6bcfd0b
 SIZE (zeebo-xxh3-v1.0.2_GH0.tar.gz) = 286392
diff --git a/www/pomerium/files/modules.txt b/www/pomerium/files/modules.txt
index d5c992935dab..6f8587237ce1 100644
--- a/www/pomerium/files/modules.txt
+++ b/www/pomerium/files/modules.txt
@@ -1,2141 +1,2143 @@
 # buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.11-20251209175733-2a1774d88802.1
 ## explicit; go 1.23
 buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go/buf/validate
 # buf.build/go/protovalidate v1.1.0
 ## explicit; go 1.24.0
 buf.build/go/protovalidate
 buf.build/go/protovalidate/cel
 # cel.dev/expr v0.25.1
 ## explicit; go 1.23.0
 cel.dev/expr
 # charm.land/bubbles/v2 v2.0.0-rc.1
 ## explicit; go 1.24.2
 charm.land/bubbles/v2/cursor
 charm.land/bubbles/v2/help
 charm.land/bubbles/v2/internal/runeutil
 charm.land/bubbles/v2/key
 charm.land/bubbles/v2/list
 charm.land/bubbles/v2/paginator
 charm.land/bubbles/v2/spinner
 charm.land/bubbles/v2/table
 charm.land/bubbles/v2/textinput
 charm.land/bubbles/v2/viewport
 # charm.land/bubbletea/v2 v2.0.0-rc.2
 ## explicit; go 1.24.2
 charm.land/bubbletea/v2
 # charm.land/lipgloss/v2 v2.0.0-beta.3.0.20251106192539-4b304240aab7
 ## explicit; go 1.24.2
 charm.land/lipgloss/v2
 # cloud.google.com/go v0.123.0
 ## explicit; go 1.24.0
 cloud.google.com/go/internal
 cloud.google.com/go/internal/optional
 cloud.google.com/go/internal/trace
 cloud.google.com/go/internal/version
 # cloud.google.com/go/auth v0.17.0
 ## explicit; go 1.24.0
 cloud.google.com/go/auth
 cloud.google.com/go/auth/credentials
 cloud.google.com/go/auth/credentials/idtoken
 cloud.google.com/go/auth/credentials/impersonate
 cloud.google.com/go/auth/credentials/internal/externalaccount
 cloud.google.com/go/auth/credentials/internal/externalaccountuser
 cloud.google.com/go/auth/credentials/internal/gdch
 cloud.google.com/go/auth/credentials/internal/impersonate
 cloud.google.com/go/auth/credentials/internal/stsexchange
 cloud.google.com/go/auth/grpctransport
 cloud.google.com/go/auth/httptransport
 cloud.google.com/go/auth/internal
 cloud.google.com/go/auth/internal/compute
 cloud.google.com/go/auth/internal/credsfile
 cloud.google.com/go/auth/internal/jwt
 cloud.google.com/go/auth/internal/retry
 cloud.google.com/go/auth/internal/transport
 cloud.google.com/go/auth/internal/transport/cert
 cloud.google.com/go/auth/internal/transport/headers
 cloud.google.com/go/auth/internal/trustboundary
 # cloud.google.com/go/auth/oauth2adapt v0.2.8
 ## explicit; go 1.23.0
 cloud.google.com/go/auth/oauth2adapt
 # cloud.google.com/go/compute/metadata v0.9.0
 ## explicit; go 1.24.0
 cloud.google.com/go/compute/metadata
 # cloud.google.com/go/iam v1.5.3
 ## explicit; go 1.24.0
 cloud.google.com/go/iam
 cloud.google.com/go/iam/apiv1/iampb
 # cloud.google.com/go/monitoring v1.24.2
 ## explicit; go 1.23.0
 cloud.google.com/go/monitoring/apiv3/v2
 cloud.google.com/go/monitoring/apiv3/v2/monitoringpb
 cloud.google.com/go/monitoring/internal
 # cloud.google.com/go/storage v1.58.0
 ## explicit; go 1.24.0
 cloud.google.com/go/storage
 cloud.google.com/go/storage/experimental
 cloud.google.com/go/storage/internal
 cloud.google.com/go/storage/internal/apiv2
 cloud.google.com/go/storage/internal/apiv2/storagepb
 # contrib.go.opencensus.io/exporter/prometheus v0.4.2
 ## explicit; go 1.13
 contrib.go.opencensus.io/exporter/prometheus
 # dario.cat/mergo v1.0.2
 ## explicit; go 1.13
 dario.cat/mergo
 # filippo.io/bigmod v0.0.3
 ## explicit; go 1.20
 filippo.io/bigmod
 # filippo.io/csrf v0.2.1
 ## explicit; go 1.24.0
 filippo.io/csrf
 filippo.io/csrf/gorilla
 # filippo.io/keygen v0.0.0-20250626140535-790df0a991a0
 ## explicit; go 1.20
 filippo.io/keygen
 # github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c
 ## explicit; go 1.16
 github.com/Azure/go-ansiterm
 github.com/Azure/go-ansiterm/winterm
 # github.com/CAFxX/httpcompression v0.0.9
 ## explicit; go 1.11
 github.com/CAFxX/httpcompression
 github.com/CAFxX/httpcompression/contrib/andybalholm/brotli
 github.com/CAFxX/httpcompression/contrib/compress/gzip
 github.com/CAFxX/httpcompression/contrib/compress/zlib
 github.com/CAFxX/httpcompression/contrib/internal/utils
 github.com/CAFxX/httpcompression/contrib/klauspost/zstd
 # github.com/DataDog/zstd v1.5.7
 ## explicit; go 1.14
 github.com/DataDog/zstd
-# github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0
+# github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0
 ## explicit; go 1.24.0
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
 # github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0
 ## explicit; go 1.24.0
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric
 # github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0
 ## explicit; go 1.24.0
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping
 # github.com/Masterminds/semver/v3 v3.4.0
 ## explicit; go 1.21
 github.com/Masterminds/semver/v3
 # github.com/Microsoft/go-winio v0.6.2
 ## explicit; go 1.21
 github.com/Microsoft/go-winio
 github.com/Microsoft/go-winio/internal/fs
 github.com/Microsoft/go-winio/internal/socket
 github.com/Microsoft/go-winio/internal/stringbuffer
 github.com/Microsoft/go-winio/pkg/guid
 # github.com/RaduBerinde/axisds v0.0.0-20250419182453-5135a0650657
 ## explicit; go 1.23
 github.com/RaduBerinde/axisds
 github.com/RaduBerinde/axisds/regiontree
 # github.com/RaduBerinde/btreemap v0.0.0-20250419174037-3d62b7205d54
 ## explicit; go 1.23
 github.com/RaduBerinde/btreemap
 # github.com/VictoriaMetrics/fastcache v1.13.2
 ## explicit; go 1.24.0
 github.com/VictoriaMetrics/fastcache
 # github.com/agnivade/levenshtein v1.2.1
 ## explicit; go 1.21
 github.com/agnivade/levenshtein
 # github.com/andybalholm/brotli v1.0.5
 ## explicit; go 1.12
 github.com/andybalholm/brotli
 # github.com/antlr4-go/antlr/v4 v4.13.1
 ## explicit; go 1.22
 github.com/antlr4-go/antlr/v4
 # github.com/apapsch/go-jsonmerge/v2 v2.0.0
 ## explicit; go 1.12
 github.com/apapsch/go-jsonmerge/v2
 # github.com/armon/go-metrics v0.4.1
 ## explicit; go 1.12
 github.com/armon/go-metrics
 # github.com/atotto/clipboard v0.1.4
 ## explicit
 github.com/atotto/clipboard
 # github.com/aws/aws-sdk-go-v2 v1.41.0
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/aws
 github.com/aws/aws-sdk-go-v2/aws/arn
 github.com/aws/aws-sdk-go-v2/aws/defaults
 github.com/aws/aws-sdk-go-v2/aws/middleware
 github.com/aws/aws-sdk-go-v2/aws/protocol/query
 github.com/aws/aws-sdk-go-v2/aws/protocol/restjson
 github.com/aws/aws-sdk-go-v2/aws/protocol/xml
 github.com/aws/aws-sdk-go-v2/aws/ratelimit
 github.com/aws/aws-sdk-go-v2/aws/retry
 github.com/aws/aws-sdk-go-v2/aws/signer/internal/v4
 github.com/aws/aws-sdk-go-v2/aws/signer/v4
 github.com/aws/aws-sdk-go-v2/aws/transport/http
 github.com/aws/aws-sdk-go-v2/internal/auth
 github.com/aws/aws-sdk-go-v2/internal/auth/smithy
 github.com/aws/aws-sdk-go-v2/internal/context
 github.com/aws/aws-sdk-go-v2/internal/endpoints
 github.com/aws/aws-sdk-go-v2/internal/endpoints/awsrulesfn
 github.com/aws/aws-sdk-go-v2/internal/middleware
 github.com/aws/aws-sdk-go-v2/internal/rand
 github.com/aws/aws-sdk-go-v2/internal/sdk
 github.com/aws/aws-sdk-go-v2/internal/sdkio
 github.com/aws/aws-sdk-go-v2/internal/shareddefaults
 github.com/aws/aws-sdk-go-v2/internal/strings
 github.com/aws/aws-sdk-go-v2/internal/sync/singleflight
 github.com/aws/aws-sdk-go-v2/internal/timeconv
 # github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream/eventstreamapi
 # github.com/aws/aws-sdk-go-v2/config v1.32.6
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/config
 # github.com/aws/aws-sdk-go-v2/credentials v1.19.6
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/credentials
 github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds
 github.com/aws/aws-sdk-go-v2/credentials/endpointcreds
 github.com/aws/aws-sdk-go-v2/credentials/endpointcreds/internal/client
 github.com/aws/aws-sdk-go-v2/credentials/logincreds
 github.com/aws/aws-sdk-go-v2/credentials/processcreds
 github.com/aws/aws-sdk-go-v2/credentials/ssocreds
 github.com/aws/aws-sdk-go-v2/credentials/stscreds
 # github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.16
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds/internal/config
 # github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.16
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/internal/configsources
 # github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.16
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
 # github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/internal/ini
 # github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.16
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/internal/v4a
 github.com/aws/aws-sdk-go-v2/internal/v4a/internal/crypto
 github.com/aws/aws-sdk-go-v2/internal/v4a/internal/v4
 # github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
 # github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.7
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/internal/checksum
 # github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.16
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
 # github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.16
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared/arn
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared/config
 # github.com/aws/aws-sdk-go-v2/service/s3 v1.95.0
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/s3
 github.com/aws/aws-sdk-go-v2/service/s3/internal/arn
 github.com/aws/aws-sdk-go-v2/service/s3/internal/customizations
 github.com/aws/aws-sdk-go-v2/service/s3/internal/endpoints
 github.com/aws/aws-sdk-go-v2/service/s3/types
 # github.com/aws/aws-sdk-go-v2/service/signin v1.0.4
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/signin
 github.com/aws/aws-sdk-go-v2/service/signin/internal/endpoints
 github.com/aws/aws-sdk-go-v2/service/signin/types
 # github.com/aws/aws-sdk-go-v2/service/sso v1.30.8
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/sso
 github.com/aws/aws-sdk-go-v2/service/sso/internal/endpoints
 github.com/aws/aws-sdk-go-v2/service/sso/types
 # github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.12
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/ssooidc
 github.com/aws/aws-sdk-go-v2/service/ssooidc/internal/endpoints
 github.com/aws/aws-sdk-go-v2/service/ssooidc/types
 # github.com/aws/aws-sdk-go-v2/service/sts v1.41.5
 ## explicit; go 1.23
 github.com/aws/aws-sdk-go-v2/service/sts
 github.com/aws/aws-sdk-go-v2/service/sts/internal/endpoints
 github.com/aws/aws-sdk-go-v2/service/sts/types
 # github.com/aws/smithy-go v1.24.0
 ## explicit; go 1.23
 github.com/aws/smithy-go
 github.com/aws/smithy-go/auth
 github.com/aws/smithy-go/auth/bearer
 github.com/aws/smithy-go/container/private/cache
 github.com/aws/smithy-go/container/private/cache/lru
 github.com/aws/smithy-go/context
 github.com/aws/smithy-go/document
 github.com/aws/smithy-go/encoding
 github.com/aws/smithy-go/encoding/httpbinding
 github.com/aws/smithy-go/encoding/json
 github.com/aws/smithy-go/encoding/xml
 github.com/aws/smithy-go/endpoints
 github.com/aws/smithy-go/endpoints/private/rulesfn
 github.com/aws/smithy-go/internal/sync/singleflight
 github.com/aws/smithy-go/io
 github.com/aws/smithy-go/logging
 github.com/aws/smithy-go/metrics
 github.com/aws/smithy-go/middleware
 github.com/aws/smithy-go/private/requestcompression
 github.com/aws/smithy-go/ptr
 github.com/aws/smithy-go/rand
 github.com/aws/smithy-go/sync
 github.com/aws/smithy-go/time
 github.com/aws/smithy-go/tracing
 github.com/aws/smithy-go/transport/http
 github.com/aws/smithy-go/transport/http/internal/io
 github.com/aws/smithy-go/waiter
 # github.com/aymanbagabas/go-osc52/v2 v2.0.1
 ## explicit; go 1.16
 github.com/aymanbagabas/go-osc52/v2
 # github.com/beorn7/perks v1.0.1
 ## explicit; go 1.11
 github.com/beorn7/perks/quantile
 # github.com/bits-and-blooms/bitset v1.24.4
 ## explicit; go 1.16
 github.com/bits-and-blooms/bitset
 # github.com/caddyserver/certmagic v0.25.1
 ## explicit; go 1.24.0
 github.com/caddyserver/certmagic
 github.com/caddyserver/certmagic/internal/atomicfile
 # github.com/caddyserver/zerossl v0.1.4
 ## explicit; go 1.21.0
 github.com/caddyserver/zerossl
 # github.com/ccoveille/go-safecast v1.8.2
 ## explicit; go 1.21
 github.com/ccoveille/go-safecast
 # github.com/cenkalti/backoff/v4 v4.3.0
 ## explicit; go 1.18
 github.com/cenkalti/backoff/v4
 # github.com/cenkalti/backoff/v5 v5.0.3
 ## explicit; go 1.23
 github.com/cenkalti/backoff/v5
 # github.com/cespare/xxhash/v2 v2.3.0
 ## explicit; go 1.11
 github.com/cespare/xxhash/v2
 # github.com/charmbracelet/colorprofile v0.4.1
 ## explicit; go 1.24.2
 github.com/charmbracelet/colorprofile
 # github.com/charmbracelet/ultraviolet v0.0.0-20251116181749-377898bcce38
 ## explicit; go 1.24.2
 github.com/charmbracelet/ultraviolet
 # github.com/charmbracelet/x/ansi v0.11.3
 ## explicit; go 1.24.2
 github.com/charmbracelet/x/ansi
 github.com/charmbracelet/x/ansi/kitty
 github.com/charmbracelet/x/ansi/parser
 # github.com/charmbracelet/x/term v0.2.2
 ## explicit; go 1.24.0
 github.com/charmbracelet/x/term
 # github.com/charmbracelet/x/termios v0.1.1
 ## explicit; go 1.18
 github.com/charmbracelet/x/termios
 # github.com/charmbracelet/x/windows v0.2.2
 ## explicit; go 1.23.0
 github.com/charmbracelet/x/windows
 # github.com/clipperhouse/displaywidth v0.6.1
 ## explicit; go 1.18
 github.com/clipperhouse/displaywidth
 # github.com/clipperhouse/stringish v0.1.1
 ## explicit; go 1.18
 github.com/clipperhouse/stringish
 # github.com/clipperhouse/uax29/v2 v2.3.0
 ## explicit; go 1.18
 github.com/clipperhouse/uax29/v2/graphemes
 github.com/clipperhouse/uax29/v2/internal/iterators
 # github.com/cloudflare/circl v1.6.3
 ## explicit; go 1.22.0
 github.com/cloudflare/circl/dh/x25519
 github.com/cloudflare/circl/dh/x448
 github.com/cloudflare/circl/hpke
 github.com/cloudflare/circl/internal/conv
 github.com/cloudflare/circl/internal/sha3
 github.com/cloudflare/circl/kem
 github.com/cloudflare/circl/kem/kyber/kyber768
 github.com/cloudflare/circl/kem/mlkem/mlkem768
 github.com/cloudflare/circl/kem/xwing
 github.com/cloudflare/circl/math/fp25519
 github.com/cloudflare/circl/math/fp448
 github.com/cloudflare/circl/pke/kyber/internal/common
 github.com/cloudflare/circl/pke/kyber/internal/common/params
 github.com/cloudflare/circl/pke/kyber/kyber768
 github.com/cloudflare/circl/pke/kyber/kyber768/internal
 github.com/cloudflare/circl/simd/keccakf1600
 # github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5
 ## explicit; go 1.24
 github.com/cncf/xds/go/udpa/annotations
 github.com/cncf/xds/go/udpa/type/v1
 github.com/cncf/xds/go/xds/annotations/v3
 github.com/cncf/xds/go/xds/core/v3
 github.com/cncf/xds/go/xds/data/orca/v3
 github.com/cncf/xds/go/xds/service/orca/v3
 github.com/cncf/xds/go/xds/type/matcher/v3
 github.com/cncf/xds/go/xds/type/v3
 # github.com/cockroachdb/crlib v0.0.0-20241112164430-1264a2edc35b
 ## explicit; go 1.22
 github.com/cockroachdb/crlib/crbytes
 github.com/cockroachdb/crlib/crstrings
 github.com/cockroachdb/crlib/crsync
 github.com/cockroachdb/crlib/crtime
 github.com/cockroachdb/crlib/fifo
 github.com/cockroachdb/crlib/internal/invariants
 # github.com/cockroachdb/errors v1.11.3
 ## explicit; go 1.19
 github.com/cockroachdb/errors
 github.com/cockroachdb/errors/assert
 github.com/cockroachdb/errors/barriers
 github.com/cockroachdb/errors/contexttags
 github.com/cockroachdb/errors/domains
 github.com/cockroachdb/errors/errbase
 github.com/cockroachdb/errors/errorspb
 github.com/cockroachdb/errors/errutil
 github.com/cockroachdb/errors/hintdetail
 github.com/cockroachdb/errors/issuelink
 github.com/cockroachdb/errors/join
 github.com/cockroachdb/errors/markers
 github.com/cockroachdb/errors/oserror
 github.com/cockroachdb/errors/report
 github.com/cockroachdb/errors/safedetails
 github.com/cockroachdb/errors/secondary
 github.com/cockroachdb/errors/stdstrings
 github.com/cockroachdb/errors/telemetrykeys
 github.com/cockroachdb/errors/withstack
 # github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b
 ## explicit; go 1.16
 github.com/cockroachdb/logtags
 # github.com/cockroachdb/pebble/v2 v2.1.3
 ## explicit; go 1.23
 github.com/cockroachdb/pebble/v2
 github.com/cockroachdb/pebble/v2/batchrepr
 github.com/cockroachdb/pebble/v2/bloom
 github.com/cockroachdb/pebble/v2/internal/arenaskl
 github.com/cockroachdb/pebble/v2/internal/base
 github.com/cockroachdb/pebble/v2/internal/batchskl
 github.com/cockroachdb/pebble/v2/internal/binfmt
 github.com/cockroachdb/pebble/v2/internal/bitflip
 github.com/cockroachdb/pebble/v2/internal/blobtest
 github.com/cockroachdb/pebble/v2/internal/buildtags
 github.com/cockroachdb/pebble/v2/internal/bytealloc
 github.com/cockroachdb/pebble/v2/internal/cache
 github.com/cockroachdb/pebble/v2/internal/compact
 github.com/cockroachdb/pebble/v2/internal/compression
 github.com/cockroachdb/pebble/v2/internal/constants
 github.com/cockroachdb/pebble/v2/internal/crc
 github.com/cockroachdb/pebble/v2/internal/dsl
 github.com/cockroachdb/pebble/v2/internal/ewma
 github.com/cockroachdb/pebble/v2/internal/genericcache
 github.com/cockroachdb/pebble/v2/internal/humanize
 github.com/cockroachdb/pebble/v2/internal/intern
 github.com/cockroachdb/pebble/v2/internal/invalidating
 github.com/cockroachdb/pebble/v2/internal/invariants
 github.com/cockroachdb/pebble/v2/internal/keyspan
 github.com/cockroachdb/pebble/v2/internal/keyspan/keyspanimpl
 github.com/cockroachdb/pebble/v2/internal/lsmview
 github.com/cockroachdb/pebble/v2/internal/manifest
 github.com/cockroachdb/pebble/v2/internal/manual
 github.com/cockroachdb/pebble/v2/internal/overlap
 github.com/cockroachdb/pebble/v2/internal/private
 github.com/cockroachdb/pebble/v2/internal/problemspans
 github.com/cockroachdb/pebble/v2/internal/rangedel
 github.com/cockroachdb/pebble/v2/internal/rangekey
 github.com/cockroachdb/pebble/v2/internal/rangekeystack
 github.com/cockroachdb/pebble/v2/internal/rawalloc
 github.com/cockroachdb/pebble/v2/internal/sstableinternal
 github.com/cockroachdb/pebble/v2/internal/strparse
 github.com/cockroachdb/pebble/v2/internal/testkeys
 github.com/cockroachdb/pebble/v2/internal/treeprinter
 github.com/cockroachdb/pebble/v2/objstorage
 github.com/cockroachdb/pebble/v2/objstorage/objstorageprovider
 github.com/cockroachdb/pebble/v2/objstorage/objstorageprovider/objiotracing
 github.com/cockroachdb/pebble/v2/objstorage/objstorageprovider/remoteobjcat
 github.com/cockroachdb/pebble/v2/objstorage/objstorageprovider/sharedcache
 github.com/cockroachdb/pebble/v2/objstorage/remote
 github.com/cockroachdb/pebble/v2/rangekey
 github.com/cockroachdb/pebble/v2/record
 github.com/cockroachdb/pebble/v2/sstable
 github.com/cockroachdb/pebble/v2/sstable/blob
 github.com/cockroachdb/pebble/v2/sstable/block
 github.com/cockroachdb/pebble/v2/sstable/block/blockkind
 github.com/cockroachdb/pebble/v2/sstable/colblk
 github.com/cockroachdb/pebble/v2/sstable/rowblk
 github.com/cockroachdb/pebble/v2/sstable/valblk
 github.com/cockroachdb/pebble/v2/sstable/virtual
 github.com/cockroachdb/pebble/v2/vfs
 github.com/cockroachdb/pebble/v2/vfs/atomicfs
 github.com/cockroachdb/pebble/v2/wal
 # github.com/cockroachdb/redact v1.1.5
 ## explicit; go 1.14
 github.com/cockroachdb/redact
 github.com/cockroachdb/redact/builder
 github.com/cockroachdb/redact/interfaces
 github.com/cockroachdb/redact/internal/buffer
 github.com/cockroachdb/redact/internal/escape
 github.com/cockroachdb/redact/internal/fmtforward
 github.com/cockroachdb/redact/internal/markers
 github.com/cockroachdb/redact/internal/redact
 github.com/cockroachdb/redact/internal/rfmt
 github.com/cockroachdb/redact/internal/rfmt/fmtsort
 # github.com/cockroachdb/swiss v0.0.0-20251224182025-b0f6560f979b
 ## explicit; go 1.21
 github.com/cockroachdb/swiss
 # github.com/cockroachdb/tokenbucket v0.0.0-20230807174530-cc333fc44b06
 ## explicit; go 1.19
 github.com/cockroachdb/tokenbucket
 # github.com/containerd/errdefs v1.0.0
 ## explicit; go 1.20
 github.com/containerd/errdefs
 # github.com/containerd/errdefs/pkg v0.3.0
 ## explicit; go 1.22
 github.com/containerd/errdefs/pkg/errhttp
 github.com/containerd/errdefs/pkg/internal/cause
 # github.com/containerd/log v0.1.0
 ## explicit; go 1.20
 github.com/containerd/log
 # github.com/containerd/platforms v1.0.0-rc.2
 ## explicit; go 1.20
 github.com/containerd/platforms
 # github.com/coreos/go-oidc/v3 v3.17.0
 ## explicit; go 1.24.0
 github.com/coreos/go-oidc/v3/oidc
 # github.com/cpuguy83/dockercfg v0.3.2
 ## explicit; go 1.13
 github.com/cpuguy83/dockercfg
 # github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
 ## explicit
 github.com/davecgh/go-spew/spew
 # github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0
 ## explicit; go 1.17
 github.com/decred/dcrd/dcrec/secp256k1/v4
 # github.com/distribution/reference v0.6.0
 ## explicit; go 1.20
 github.com/distribution/reference
 # github.com/docker/docker v28.5.2+incompatible
 ## explicit
 github.com/docker/docker/api
 github.com/docker/docker/api/types
 github.com/docker/docker/api/types/blkiodev
 github.com/docker/docker/api/types/build
 github.com/docker/docker/api/types/checkpoint
 github.com/docker/docker/api/types/common
 github.com/docker/docker/api/types/container
 github.com/docker/docker/api/types/events
 github.com/docker/docker/api/types/filters
 github.com/docker/docker/api/types/image
 github.com/docker/docker/api/types/mount
 github.com/docker/docker/api/types/network
 github.com/docker/docker/api/types/registry
 github.com/docker/docker/api/types/storage
 github.com/docker/docker/api/types/strslice
 github.com/docker/docker/api/types/swarm
 github.com/docker/docker/api/types/swarm/runtime
 github.com/docker/docker/api/types/system
 github.com/docker/docker/api/types/time
 github.com/docker/docker/api/types/versions
 github.com/docker/docker/api/types/volume
 github.com/docker/docker/client
 github.com/docker/docker/pkg/jsonmessage
 github.com/docker/docker/pkg/stdcopy
 # github.com/docker/go-connections v0.6.0
 ## explicit; go 1.18
 github.com/docker/go-connections/nat
 github.com/docker/go-connections/sockets
 github.com/docker/go-connections/tlsconfig
 # github.com/docker/go-units v0.5.0
 ## explicit
 github.com/docker/go-units
 # github.com/ebitengine/purego v0.8.4
 ## explicit; go 1.18
 github.com/ebitengine/purego
 github.com/ebitengine/purego/internal/cgo
 github.com/ebitengine/purego/internal/fakecgo
 github.com/ebitengine/purego/internal/strings
 # github.com/envoyproxy/go-control-plane v0.14.0
 ## explicit; go 1.23.0
 github.com/envoyproxy/go-control-plane/pkg/cache/types
 github.com/envoyproxy/go-control-plane/pkg/cache/v3
 github.com/envoyproxy/go-control-plane/pkg/log
 github.com/envoyproxy/go-control-plane/pkg/resource/v3
 github.com/envoyproxy/go-control-plane/pkg/server/config
 github.com/envoyproxy/go-control-plane/pkg/server/delta/v3
 github.com/envoyproxy/go-control-plane/pkg/server/stream/v3
 # github.com/envoyproxy/go-control-plane/envoy v1.36.0
 ## explicit; go 1.23.0
 github.com/envoyproxy/go-control-plane/envoy/admin/v3
 github.com/envoyproxy/go-control-plane/envoy/annotations
 github.com/envoyproxy/go-control-plane/envoy/api/v2
 github.com/envoyproxy/go-control-plane/envoy/api/v2/auth
 github.com/envoyproxy/go-control-plane/envoy/api/v2/cluster
 github.com/envoyproxy/go-control-plane/envoy/api/v2/core
 github.com/envoyproxy/go-control-plane/envoy/api/v2/endpoint
 github.com/envoyproxy/go-control-plane/envoy/api/v2/listener
 github.com/envoyproxy/go-control-plane/envoy/api/v2/route
 github.com/envoyproxy/go-control-plane/envoy/config/accesslog/v3
 github.com/envoyproxy/go-control-plane/envoy/config/bootstrap/v3
 github.com/envoyproxy/go-control-plane/envoy/config/cluster/v3
 github.com/envoyproxy/go-control-plane/envoy/config/common/matcher/v3
 github.com/envoyproxy/go-control-plane/envoy/config/common/mutation_rules/v3
 github.com/envoyproxy/go-control-plane/envoy/config/core/v3
 github.com/envoyproxy/go-control-plane/envoy/config/endpoint/v3
 github.com/envoyproxy/go-control-plane/envoy/config/filter/accesslog/v2
 github.com/envoyproxy/go-control-plane/envoy/config/listener/v2
 github.com/envoyproxy/go-control-plane/envoy/config/listener/v3
 github.com/envoyproxy/go-control-plane/envoy/config/metrics/v3
 github.com/envoyproxy/go-control-plane/envoy/config/overload/v3
 github.com/envoyproxy/go-control-plane/envoy/config/ratelimit/v3
 github.com/envoyproxy/go-control-plane/envoy/config/rbac/v3
 github.com/envoyproxy/go-control-plane/envoy/config/route/v3
 github.com/envoyproxy/go-control-plane/envoy/config/tap/v3
 github.com/envoyproxy/go-control-plane/envoy/config/trace/v3
 github.com/envoyproxy/go-control-plane/envoy/data/accesslog/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/access_loggers/file/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/access_loggers/grpc/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/clusters/aggregate/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/clusters/common/dns/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/clusters/dns/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/common/ratelimit/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/common/fault/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/common/set_filter_state/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/ext_authz/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/fault/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/header_mutation/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/header_to_metadata/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/lua/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/rbac/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/router/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/http/set_filter_state/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/listener/proxy_protocol/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/listener/tls_inspector/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/generic_proxy/action/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/generic_proxy/matcher/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/generic_proxy/router/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/generic_proxy/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/http_connection_manager/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/ratelimit/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/filters/network/tcp_proxy/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/http/header_formatters/preserve_case/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/common/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/least_request/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/pick_first/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/ring_hash/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/load_balancing_policies/wrr_locality/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/network/dns_resolver/cares/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/rbac/audit_loggers/stream/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/resource_monitors/downstream_connections/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/resource_monitors/injected_resource/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/tracers/opentelemetry/resource_detectors/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/internal_upstream/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/quic/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/raw_buffer/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/transport_sockets/tls/v3
 github.com/envoyproxy/go-control-plane/envoy/extensions/upstreams/http/v3
 github.com/envoyproxy/go-control-plane/envoy/service/accesslog/v3
 github.com/envoyproxy/go-control-plane/envoy/service/auth/v3
 github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3
 github.com/envoyproxy/go-control-plane/envoy/service/endpoint/v3
 github.com/envoyproxy/go-control-plane/envoy/service/load_stats/v3
 github.com/envoyproxy/go-control-plane/envoy/service/ratelimit/v3
 github.com/envoyproxy/go-control-plane/envoy/service/runtime/v3
 github.com/envoyproxy/go-control-plane/envoy/service/status/v3
 github.com/envoyproxy/go-control-plane/envoy/type
 github.com/envoyproxy/go-control-plane/envoy/type/http/v3
 github.com/envoyproxy/go-control-plane/envoy/type/matcher
 github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3
 github.com/envoyproxy/go-control-plane/envoy/type/metadata/v2
 github.com/envoyproxy/go-control-plane/envoy/type/metadata/v3
 github.com/envoyproxy/go-control-plane/envoy/type/tracing/v2
 github.com/envoyproxy/go-control-plane/envoy/type/tracing/v3
 github.com/envoyproxy/go-control-plane/envoy/type/v3
 # github.com/envoyproxy/protoc-gen-validate v1.3.0
 ## explicit; go 1.21.1
 github.com/envoyproxy/protoc-gen-validate/validate
-# github.com/exaring/otelpgx v0.9.4
+# github.com/exaring/otelpgx v0.10.0
 ## explicit; go 1.22.0
 github.com/exaring/otelpgx
 # github.com/fatih/color v1.18.0
 ## explicit; go 1.17
 github.com/fatih/color
 # github.com/felixge/httpsnoop v1.0.4
 ## explicit; go 1.13
 github.com/felixge/httpsnoop
 # github.com/fsnotify/fsnotify v1.9.0
 ## explicit; go 1.17
 github.com/fsnotify/fsnotify
 github.com/fsnotify/fsnotify/internal
 # github.com/fxamacker/cbor/v2 v2.9.0
 ## explicit; go 1.20
 github.com/fxamacker/cbor/v2
 # github.com/gaissmai/bart v0.26.0
 ## explicit; go 1.24.0
 github.com/gaissmai/bart
 github.com/gaissmai/bart/internal/allot
 github.com/gaissmai/bart/internal/art
 github.com/gaissmai/bart/internal/bitset
 github.com/gaissmai/bart/internal/lpm
 github.com/gaissmai/bart/internal/nodes
 github.com/gaissmai/bart/internal/sparse
 github.com/gaissmai/bart/internal/tests/golden
 github.com/gaissmai/bart/internal/tests/random
 # github.com/getsentry/sentry-go v0.27.0
 ## explicit; go 1.18
 github.com/getsentry/sentry-go
 github.com/getsentry/sentry-go/internal/debug
 github.com/getsentry/sentry-go/internal/otel/baggage
 github.com/getsentry/sentry-go/internal/otel/baggage/internal/baggage
 github.com/getsentry/sentry-go/internal/ratelimit
 github.com/getsentry/sentry-go/internal/traceparser
 # github.com/go-chi/chi/v5 v5.2.3
 ## explicit; go 1.20
 github.com/go-chi/chi/v5
 github.com/go-chi/chi/v5/middleware
 # github.com/go-ini/ini v1.67.0
 ## explicit
 github.com/go-ini/ini
-# github.com/go-jose/go-jose/v3 v3.0.4
+# github.com/go-jose/go-jose/v3 v3.0.5
 ## explicit; go 1.12
 github.com/go-jose/go-jose/v3
 github.com/go-jose/go-jose/v3/cipher
 github.com/go-jose/go-jose/v3/json
 github.com/go-jose/go-jose/v3/jwt
-# github.com/go-jose/go-jose/v4 v4.1.3
+# github.com/go-jose/go-jose/v4 v4.1.4
 ## explicit; go 1.24.0
 github.com/go-jose/go-jose/v4
 github.com/go-jose/go-jose/v4/cipher
 github.com/go-jose/go-jose/v4/json
 # github.com/go-kit/log v0.2.1
 ## explicit; go 1.17
 github.com/go-kit/log
 github.com/go-kit/log/level
 # github.com/go-logfmt/logfmt v0.6.0
 ## explicit; go 1.17
 github.com/go-logfmt/logfmt
 # github.com/go-logr/logr v1.4.3
 ## explicit; go 1.18
 github.com/go-logr/logr
 github.com/go-logr/logr/funcr
 # github.com/go-logr/stdr v1.2.2
 ## explicit; go 1.16
 github.com/go-logr/stdr
 # github.com/go-ole/go-ole v1.3.0
 ## explicit; go 1.12
 github.com/go-ole/go-ole
 github.com/go-ole/go-ole/oleutil
 # github.com/go-viper/mapstructure/v2 v2.4.0
 ## explicit; go 1.18
 github.com/go-viper/mapstructure/v2
 github.com/go-viper/mapstructure/v2/internal/errors
 # github.com/gobwas/glob v0.2.3
 ## explicit
 github.com/gobwas/glob
 github.com/gobwas/glob/compiler
 github.com/gobwas/glob/match
 github.com/gobwas/glob/syntax
 github.com/gobwas/glob/syntax/ast
 github.com/gobwas/glob/syntax/lexer
 github.com/gobwas/glob/util/runes
 github.com/gobwas/glob/util/strings
 # github.com/goccy/go-json v0.10.5
 ## explicit; go 1.19
 github.com/goccy/go-json
 github.com/goccy/go-json/internal/decoder
 github.com/goccy/go-json/internal/encoder
 github.com/goccy/go-json/internal/encoder/vm
 github.com/goccy/go-json/internal/encoder/vm_color
 github.com/goccy/go-json/internal/encoder/vm_color_indent
 github.com/goccy/go-json/internal/encoder/vm_indent
 github.com/goccy/go-json/internal/errors
 github.com/goccy/go-json/internal/runtime
 # github.com/gogo/protobuf v1.3.2
 ## explicit; go 1.15
 github.com/gogo/protobuf/gogoproto
 github.com/gogo/protobuf/proto
 github.com/gogo/protobuf/protoc-gen-gogo/descriptor
 github.com/gogo/protobuf/sortkeys
 github.com/gogo/protobuf/types
 # github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
 ## explicit; go 1.20
 github.com/golang/groupcache/lru
 # github.com/golang/snappy v1.0.0
 ## explicit
 github.com/golang/snappy
 # github.com/google/btree v1.1.3
 ## explicit; go 1.18
 github.com/google/btree
 # github.com/google/cel-go v0.26.1
 ## explicit; go 1.22.0
 github.com/google/cel-go/cel
 github.com/google/cel-go/checker
 github.com/google/cel-go/checker/decls
 github.com/google/cel-go/common
 github.com/google/cel-go/common/ast
 github.com/google/cel-go/common/containers
 github.com/google/cel-go/common/debug
 github.com/google/cel-go/common/decls
 github.com/google/cel-go/common/env
 github.com/google/cel-go/common/functions
 github.com/google/cel-go/common/operators
 github.com/google/cel-go/common/overloads
 github.com/google/cel-go/common/runes
 github.com/google/cel-go/common/stdlib
 github.com/google/cel-go/common/types
 github.com/google/cel-go/common/types/pb
 github.com/google/cel-go/common/types/ref
 github.com/google/cel-go/common/types/traits
 github.com/google/cel-go/ext
 github.com/google/cel-go/interpreter
 github.com/google/cel-go/parser
 github.com/google/cel-go/parser/gen
 # github.com/google/go-cmp v0.7.0
 ## explicit; go 1.21
 github.com/google/go-cmp/cmp
 github.com/google/go-cmp/cmp/cmpopts
 github.com/google/go-cmp/cmp/internal/diff
 github.com/google/go-cmp/cmp/internal/flags
 github.com/google/go-cmp/cmp/internal/function
 github.com/google/go-cmp/cmp/internal/value
 # github.com/google/go-jsonnet v0.21.0
 ## explicit; go 1.23.7
 github.com/google/go-jsonnet
 github.com/google/go-jsonnet/ast
 github.com/google/go-jsonnet/astgen
 github.com/google/go-jsonnet/internal/errors
 github.com/google/go-jsonnet/internal/parser
 github.com/google/go-jsonnet/internal/program
 github.com/google/go-jsonnet/toolutils
 # github.com/google/go-tpm v0.9.8
 ## explicit; go 1.22
 github.com/google/go-tpm/legacy/tpm2
 github.com/google/go-tpm/tpmutil
 github.com/google/go-tpm/tpmutil/tbs
 # github.com/google/jsonschema-go v0.4.2
 ## explicit; go 1.23.0
 github.com/google/jsonschema-go/jsonschema
 # github.com/google/s2a-go v0.1.9
 ## explicit; go 1.20
 github.com/google/s2a-go
 github.com/google/s2a-go/fallback
 github.com/google/s2a-go/internal/authinfo
 github.com/google/s2a-go/internal/handshaker
 github.com/google/s2a-go/internal/handshaker/service
 github.com/google/s2a-go/internal/proto/common_go_proto
 github.com/google/s2a-go/internal/proto/s2a_context_go_proto
 github.com/google/s2a-go/internal/proto/s2a_go_proto
 github.com/google/s2a-go/internal/proto/v2/common_go_proto
 github.com/google/s2a-go/internal/proto/v2/s2a_context_go_proto
 github.com/google/s2a-go/internal/proto/v2/s2a_go_proto
 github.com/google/s2a-go/internal/record
 github.com/google/s2a-go/internal/record/internal/aeadcrypter
 github.com/google/s2a-go/internal/record/internal/halfconn
 github.com/google/s2a-go/internal/tokenmanager
 github.com/google/s2a-go/internal/v2
 github.com/google/s2a-go/internal/v2/certverifier
 github.com/google/s2a-go/internal/v2/remotesigner
 github.com/google/s2a-go/internal/v2/tlsconfigstore
 github.com/google/s2a-go/retry
 github.com/google/s2a-go/stream
 # github.com/google/uuid v1.6.0
 ## explicit
 github.com/google/uuid
 # github.com/googleapis/enterprise-certificate-proxy v0.3.7
 ## explicit; go 1.23.0
 github.com/googleapis/enterprise-certificate-proxy/client
 github.com/googleapis/enterprise-certificate-proxy/client/util
 # github.com/googleapis/gax-go/v2 v2.15.0
 ## explicit; go 1.23.0
 github.com/googleapis/gax-go/v2
 github.com/googleapis/gax-go/v2/apierror
 github.com/googleapis/gax-go/v2/apierror/internal/proto
 github.com/googleapis/gax-go/v2/callctx
 github.com/googleapis/gax-go/v2/internal
 github.com/googleapis/gax-go/v2/internallog
 github.com/googleapis/gax-go/v2/internallog/grpclog
 github.com/googleapis/gax-go/v2/internallog/internal
 github.com/googleapis/gax-go/v2/iterator
 # github.com/gorilla/mux v1.8.1
 ## explicit; go 1.20
 github.com/gorilla/mux
 # github.com/gorilla/securecookie v1.1.2
 ## explicit; go 1.20
 github.com/gorilla/securecookie
 # github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674
 ## explicit; go 1.20
 github.com/gorilla/websocket
 # github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
 ## explicit
 github.com/gregjones/httpcache
 # github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3
 ## explicit; go 1.23.0
 github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors
 github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors/logging
-# github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3
+# github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
 ## explicit; go 1.24.0
 github.com/grpc-ecosystem/grpc-gateway/v2/internal/httprule
 github.com/grpc-ecosystem/grpc-gateway/v2/runtime
 github.com/grpc-ecosystem/grpc-gateway/v2/utilities
 # github.com/hashicorp/errwrap v1.1.0
 ## explicit
 github.com/hashicorp/errwrap
 # github.com/hashicorp/go-hclog v1.6.2
 ## explicit; go 1.13
 github.com/hashicorp/go-hclog
 # github.com/hashicorp/go-immutable-radix v1.0.0
 ## explicit
 github.com/hashicorp/go-immutable-radix
 # github.com/hashicorp/go-metrics v0.5.4
 ## explicit; go 1.12
 github.com/hashicorp/go-metrics
 github.com/hashicorp/go-metrics/compat
 # github.com/hashicorp/go-msgpack/v2 v2.1.2
 ## explicit; go 1.19
 github.com/hashicorp/go-msgpack/v2/codec
 # github.com/hashicorp/go-multierror v1.1.1
 ## explicit; go 1.13
 github.com/hashicorp/go-multierror
 # github.com/hashicorp/go-set/v3 v3.0.1
 ## explicit; go 1.23
 github.com/hashicorp/go-set/v3
 # github.com/hashicorp/golang-lru v0.5.1
 ## explicit
 github.com/hashicorp/golang-lru/simplelru
 # github.com/hashicorp/golang-lru/v2 v2.0.7
 ## explicit; go 1.18
 github.com/hashicorp/golang-lru/v2
 github.com/hashicorp/golang-lru/v2/internal
 github.com/hashicorp/golang-lru/v2/simplelru
 # github.com/hashicorp/raft v1.7.3
 ## explicit; go 1.20
 github.com/hashicorp/raft
 # github.com/inconshreveable/mousetrap v1.1.0
 ## explicit; go 1.18
 github.com/inconshreveable/mousetrap
 # github.com/jackc/pgpassfile v1.0.0
 ## explicit; go 1.12
 github.com/jackc/pgpassfile
 # github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
 ## explicit; go 1.14
 github.com/jackc/pgservicefile
 # github.com/jackc/pgx/v5 v5.9.2
 ## explicit; go 1.25.0
 github.com/jackc/pgx/v5
 github.com/jackc/pgx/v5/internal/iobufpool
 github.com/jackc/pgx/v5/internal/pgio
 github.com/jackc/pgx/v5/internal/sanitize
 github.com/jackc/pgx/v5/internal/stmtcache
 github.com/jackc/pgx/v5/pgconn
 github.com/jackc/pgx/v5/pgconn/ctxwatch
 github.com/jackc/pgx/v5/pgconn/internal/bgreader
 github.com/jackc/pgx/v5/pgproto3
 github.com/jackc/pgx/v5/pgtype
 github.com/jackc/pgx/v5/pgxpool
 # github.com/jackc/puddle/v2 v2.2.2
 ## explicit; go 1.19
 github.com/jackc/puddle/v2
 github.com/jackc/puddle/v2/internal/genstack
 # github.com/johannesboyne/gofakes3 v0.0.0-20250916175020-ebf3e50324d3
 ## explicit; go 1.24
 github.com/johannesboyne/gofakes3
 github.com/johannesboyne/gofakes3/backend/s3mem
 github.com/johannesboyne/gofakes3/internal/goskipiter
 github.com/johannesboyne/gofakes3/internal/s3io
 # github.com/jxskiss/base62 v1.1.0
 ## explicit; go 1.13
 github.com/jxskiss/base62
 # github.com/klauspost/compress v1.18.2
 ## explicit; go 1.23
 github.com/klauspost/compress
 github.com/klauspost/compress/fse
 github.com/klauspost/compress/huff0
 github.com/klauspost/compress/internal/cpuinfo
 github.com/klauspost/compress/internal/le
 github.com/klauspost/compress/internal/race
 github.com/klauspost/compress/internal/snapref
 github.com/klauspost/compress/s2
 github.com/klauspost/compress/zstd
 github.com/klauspost/compress/zstd/internal/xxhash
 # github.com/klauspost/cpuid/v2 v2.3.0
 ## explicit; go 1.22
 github.com/klauspost/cpuid/v2
 # github.com/kr/pretty v0.3.1
 ## explicit; go 1.12
 github.com/kr/pretty
 # github.com/kr/text v0.2.0
 ## explicit
 github.com/kr/text
 # github.com/kralicky/go-adaptive-radix-tree v0.0.0-20240624235931-330eb762e74c
 ## explicit; go 1.22
 github.com/kralicky/go-adaptive-radix-tree
 # github.com/lestrrat-go/blackmagic v1.0.4
 ## explicit; go 1.23
 github.com/lestrrat-go/blackmagic
 # github.com/lestrrat-go/dsig v1.0.0
 ## explicit; go 1.23.0
 github.com/lestrrat-go/dsig
 github.com/lestrrat-go/dsig/internal/ecutil
 # github.com/lestrrat-go/dsig-secp256k1 v1.0.0
 ## explicit; go 1.23.0
 github.com/lestrrat-go/dsig-secp256k1
 # github.com/lestrrat-go/httpcc v1.0.1
 ## explicit; go 1.16
 github.com/lestrrat-go/httpcc
 # github.com/lestrrat-go/httprc/v3 v3.0.1
 ## explicit; go 1.23.0
 github.com/lestrrat-go/httprc/v3
 github.com/lestrrat-go/httprc/v3/errsink
 github.com/lestrrat-go/httprc/v3/proxysink
 github.com/lestrrat-go/httprc/v3/tracesink
 # github.com/lestrrat-go/jwx/v3 v3.0.12
 ## explicit; go 1.24.0
 github.com/lestrrat-go/jwx/v3
 github.com/lestrrat-go/jwx/v3/cert
 github.com/lestrrat-go/jwx/v3/internal/base64
 github.com/lestrrat-go/jwx/v3/internal/ecutil
 github.com/lestrrat-go/jwx/v3/internal/json
 github.com/lestrrat-go/jwx/v3/internal/jwxio
 github.com/lestrrat-go/jwx/v3/internal/keyconv
 github.com/lestrrat-go/jwx/v3/internal/pool
 github.com/lestrrat-go/jwx/v3/internal/tokens
 github.com/lestrrat-go/jwx/v3/jwa
 github.com/lestrrat-go/jwx/v3/jwe
 github.com/lestrrat-go/jwx/v3/jwe/internal/aescbc
 github.com/lestrrat-go/jwx/v3/jwe/internal/cipher
 github.com/lestrrat-go/jwx/v3/jwe/internal/concatkdf
 github.com/lestrrat-go/jwx/v3/jwe/internal/content_crypt
 github.com/lestrrat-go/jwx/v3/jwe/internal/keygen
 github.com/lestrrat-go/jwx/v3/jwe/jwebb
 github.com/lestrrat-go/jwx/v3/jwk
 github.com/lestrrat-go/jwx/v3/jwk/ecdsa
 github.com/lestrrat-go/jwx/v3/jwk/jwkbb
 github.com/lestrrat-go/jwx/v3/jws
 github.com/lestrrat-go/jwx/v3/jws/internal/keytype
 github.com/lestrrat-go/jwx/v3/jws/jwsbb
 github.com/lestrrat-go/jwx/v3/jws/legacy
 github.com/lestrrat-go/jwx/v3/jwt
 github.com/lestrrat-go/jwx/v3/jwt/internal/errors
 github.com/lestrrat-go/jwx/v3/jwt/internal/types
 github.com/lestrrat-go/jwx/v3/transform
 # github.com/lestrrat-go/option v1.0.1
 ## explicit; go 1.16
 github.com/lestrrat-go/option
 # github.com/lestrrat-go/option/v2 v2.0.0
 ## explicit; go 1.23
 github.com/lestrrat-go/option/v2
 # github.com/libdns/libdns v1.1.1
 ## explicit; go 1.18
 github.com/libdns/libdns
 # github.com/libp2p/go-reuseport v0.4.0
 ## explicit; go 1.20
 github.com/libp2p/go-reuseport
 # github.com/lucasb-eyer/go-colorful v1.3.0
 ## explicit; go 1.12
 github.com/lucasb-eyer/go-colorful
 # github.com/lufia/plan9stats v0.0.0-20240513124658-fba389f38bae
 ## explicit; go 1.16
 github.com/lufia/plan9stats
 # github.com/magiconair/properties v1.8.10
 ## explicit; go 1.19
 github.com/magiconair/properties
 # github.com/martinlindhe/base36 v1.1.1
 ## explicit; go 1.16
 github.com/martinlindhe/base36
 # github.com/mattn/go-colorable v0.1.14
 ## explicit; go 1.18
 github.com/mattn/go-colorable
 # github.com/mattn/go-isatty v0.0.20
 ## explicit; go 1.15
 github.com/mattn/go-isatty
 # github.com/mattn/go-runewidth v0.0.19
 ## explicit; go 1.20
 github.com/mattn/go-runewidth
 # github.com/mholt/acmez/v3 v3.1.4
 ## explicit; go 1.21.0
 github.com/mholt/acmez/v3
 github.com/mholt/acmez/v3/acme
 # github.com/miekg/dns v1.1.69
 ## explicit; go 1.24.0
 github.com/miekg/dns
 # github.com/minio/minlz v1.0.1-0.20250507153514-87eb42fe8882
 ## explicit; go 1.21
 github.com/minio/minlz
 github.com/minio/minlz/internal/race
 # github.com/mitchellh/hashstructure/v2 v2.0.2
 ## explicit; go 1.14
 github.com/mitchellh/hashstructure/v2
 # github.com/moby/docker-image-spec v1.3.1
 ## explicit; go 1.18
 github.com/moby/docker-image-spec/specs-go/v1
 # github.com/moby/go-archive v0.1.0
 ## explicit; go 1.23.0
 github.com/moby/go-archive
 github.com/moby/go-archive/compression
 github.com/moby/go-archive/tarheader
 # github.com/moby/patternmatcher v0.6.0
 ## explicit; go 1.19
 github.com/moby/patternmatcher
 github.com/moby/patternmatcher/ignorefile
 # github.com/moby/sys/sequential v0.6.0
 ## explicit; go 1.17
 github.com/moby/sys/sequential
 # github.com/moby/sys/user v0.4.0
 ## explicit; go 1.17
 github.com/moby/sys/user
 # github.com/moby/sys/userns v0.1.0
 ## explicit; go 1.21
 github.com/moby/sys/userns
 # github.com/moby/term v0.5.2
 ## explicit; go 1.18
 github.com/moby/term
 github.com/moby/term/windows
 # github.com/modelcontextprotocol/go-sdk v1.4.1
 ## explicit; go 1.25.0
 github.com/modelcontextprotocol/go-sdk/auth
 github.com/modelcontextprotocol/go-sdk/internal/json
 github.com/modelcontextprotocol/go-sdk/internal/jsonrpc2
 github.com/modelcontextprotocol/go-sdk/internal/mcpgodebug
 github.com/modelcontextprotocol/go-sdk/internal/util
 github.com/modelcontextprotocol/go-sdk/internal/xcontext
 github.com/modelcontextprotocol/go-sdk/jsonrpc
 github.com/modelcontextprotocol/go-sdk/mcp
 github.com/modelcontextprotocol/go-sdk/oauthex
 # github.com/morikuni/aec v1.1.0
 ## explicit; go 1.21
 github.com/morikuni/aec
 # github.com/muesli/cancelreader v0.2.2
 ## explicit; go 1.17
 github.com/muesli/cancelreader
 # github.com/muesli/termenv v0.16.0
 ## explicit; go 1.17
 github.com/muesli/termenv
 # github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
 ## explicit
 github.com/munnerz/goautoneg
 # github.com/natefinch/atomic v1.0.1
 ## explicit; go 1.12
 github.com/natefinch/atomic
 # github.com/oapi-codegen/runtime v1.1.2
 ## explicit; go 1.20
 github.com/oapi-codegen/runtime
 github.com/oapi-codegen/runtime/strictmiddleware/nethttp
 github.com/oapi-codegen/runtime/types
 # github.com/onsi/ginkgo v1.16.5
 ## explicit; go 1.16
 # github.com/open-policy-agent/opa v1.12.1
 ## explicit; go 1.24.6
 github.com/open-policy-agent/opa/ast
 github.com/open-policy-agent/opa/ast/json
 github.com/open-policy-agent/opa/bundle
 github.com/open-policy-agent/opa/capabilities
 github.com/open-policy-agent/opa/format
 github.com/open-policy-agent/opa/internal/bundle
 github.com/open-policy-agent/opa/internal/cidr/merge
 github.com/open-policy-agent/opa/internal/compiler
 github.com/open-policy-agent/opa/internal/compiler/wasm
 github.com/open-policy-agent/opa/internal/compiler/wasm/opa
 github.com/open-policy-agent/opa/internal/config
 github.com/open-policy-agent/opa/internal/debug
 github.com/open-policy-agent/opa/internal/deepcopy
 github.com/open-policy-agent/opa/internal/edittree
 github.com/open-policy-agent/opa/internal/edittree/bitvector
 github.com/open-policy-agent/opa/internal/file/archive
 github.com/open-policy-agent/opa/internal/file/url
 github.com/open-policy-agent/opa/internal/future
 github.com/open-policy-agent/opa/internal/gojsonschema
 github.com/open-policy-agent/opa/internal/json/patch
 github.com/open-policy-agent/opa/internal/lcss
 github.com/open-policy-agent/opa/internal/leb128
 github.com/open-policy-agent/opa/internal/merge
 github.com/open-policy-agent/opa/internal/planner
 github.com/open-policy-agent/opa/internal/providers/aws
 github.com/open-policy-agent/opa/internal/providers/aws/crypto
 github.com/open-policy-agent/opa/internal/providers/aws/v4
 github.com/open-policy-agent/opa/internal/ref
 github.com/open-policy-agent/opa/internal/rego/opa
 github.com/open-policy-agent/opa/internal/report
 github.com/open-policy-agent/opa/internal/runtime/init
 github.com/open-policy-agent/opa/internal/semver
 github.com/open-policy-agent/opa/internal/strings
 github.com/open-policy-agent/opa/internal/strvals
 github.com/open-policy-agent/opa/internal/uuid
 github.com/open-policy-agent/opa/internal/version
 github.com/open-policy-agent/opa/internal/wasm/constant
 github.com/open-policy-agent/opa/internal/wasm/encoding
 github.com/open-policy-agent/opa/internal/wasm/instruction
 github.com/open-policy-agent/opa/internal/wasm/module
 github.com/open-policy-agent/opa/internal/wasm/opcode
 github.com/open-policy-agent/opa/internal/wasm/sdk/opa/capabilities
 github.com/open-policy-agent/opa/internal/wasm/types
 github.com/open-policy-agent/opa/internal/wasm/util
 github.com/open-policy-agent/opa/loader
 github.com/open-policy-agent/opa/rego
 github.com/open-policy-agent/opa/storage
 github.com/open-policy-agent/opa/storage/inmem
 github.com/open-policy-agent/opa/topdown/print
 github.com/open-policy-agent/opa/types
 github.com/open-policy-agent/opa/v1/ast
 github.com/open-policy-agent/opa/v1/ast/internal/scanner
 github.com/open-policy-agent/opa/v1/ast/internal/tokens
 github.com/open-policy-agent/opa/v1/ast/json
 github.com/open-policy-agent/opa/v1/ast/location
 github.com/open-policy-agent/opa/v1/bundle
 github.com/open-policy-agent/opa/v1/capabilities
 github.com/open-policy-agent/opa/v1/config
 github.com/open-policy-agent/opa/v1/format
 github.com/open-policy-agent/opa/v1/hooks
 github.com/open-policy-agent/opa/v1/ir
 github.com/open-policy-agent/opa/v1/keys
 github.com/open-policy-agent/opa/v1/loader
 github.com/open-policy-agent/opa/v1/loader/extension
 github.com/open-policy-agent/opa/v1/loader/filter
 github.com/open-policy-agent/opa/v1/logging
 github.com/open-policy-agent/opa/v1/metrics
 github.com/open-policy-agent/opa/v1/plugins
 github.com/open-policy-agent/opa/v1/plugins/rest
 github.com/open-policy-agent/opa/v1/rego
 github.com/open-policy-agent/opa/v1/resolver
 github.com/open-policy-agent/opa/v1/resolver/wasm
 github.com/open-policy-agent/opa/v1/schemas
 github.com/open-policy-agent/opa/v1/storage
 github.com/open-policy-agent/opa/v1/storage/inmem
 github.com/open-policy-agent/opa/v1/storage/internal/errors
 github.com/open-policy-agent/opa/v1/storage/internal/ptr
 github.com/open-policy-agent/opa/v1/topdown
 github.com/open-policy-agent/opa/v1/topdown/builtins
 github.com/open-policy-agent/opa/v1/topdown/cache
 github.com/open-policy-agent/opa/v1/topdown/copypropagation
 github.com/open-policy-agent/opa/v1/topdown/print
 github.com/open-policy-agent/opa/v1/tracing
 github.com/open-policy-agent/opa/v1/types
 github.com/open-policy-agent/opa/v1/util
 github.com/open-policy-agent/opa/v1/util/decoding
 github.com/open-policy-agent/opa/v1/version
 # github.com/opencontainers/go-digest v1.0.0
 ## explicit; go 1.13
 github.com/opencontainers/go-digest
 # github.com/opencontainers/image-spec v1.1.1
 ## explicit; go 1.18
 github.com/opencontainers/image-spec/specs-go
 github.com/opencontainers/image-spec/specs-go/v1
 # github.com/pelletier/go-toml/v2 v2.2.4
 ## explicit; go 1.21.0
 github.com/pelletier/go-toml/v2
 github.com/pelletier/go-toml/v2/internal/characters
 github.com/pelletier/go-toml/v2/internal/danger
 github.com/pelletier/go-toml/v2/internal/tracker
 github.com/pelletier/go-toml/v2/unstable
 # github.com/peterbourgon/ff/v3 v3.4.0
 ## explicit; go 1.18
 github.com/peterbourgon/ff/v3
 github.com/peterbourgon/ff/v3/ffcli
 github.com/peterbourgon/ff/v3/internal
 # github.com/pierrec/lz4/v4 v4.1.21
 ## explicit; go 1.14
 # github.com/pires/go-proxyproto v0.8.1
 ## explicit; go 1.24
 github.com/pires/go-proxyproto
 # github.com/pkg/errors v0.9.1
 ## explicit
 github.com/pkg/errors
 # github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10
 ## explicit; go 1.20
 github.com/planetscale/vtprotobuf/protohelpers
 github.com/planetscale/vtprotobuf/types/known/anypb
 github.com/planetscale/vtprotobuf/types/known/durationpb
 github.com/planetscale/vtprotobuf/types/known/emptypb
 github.com/planetscale/vtprotobuf/types/known/structpb
 github.com/planetscale/vtprotobuf/types/known/timestamppb
 github.com/planetscale/vtprotobuf/types/known/wrapperspb
 # github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
 ## explicit
 github.com/pmezard/go-difflib/difflib
 # github.com/pomerium/datasource v0.18.2-0.20260116153236-1f58110d0e17
 ## explicit; go 1.24.0
 github.com/pomerium/datasource/internal/httputil
 github.com/pomerium/datasource/pkg/directory
-# github.com/pomerium/envoy-custom v1.36.5-p1
+# github.com/pomerium/envoy-custom v1.36.8-p1
 ## explicit; go 1.23.0
 github.com/pomerium/envoy-custom/api/extensions/filters/network/ssh
 github.com/pomerium/envoy-custom/api/extensions/http/early_header_mutation/trace_context
 github.com/pomerium/envoy-custom/api/extensions/request_id/uuidx
 github.com/pomerium/envoy-custom/api/extensions/tracers/pomerium_otel
 # github.com/pomerium/protoutil v0.0.0-20260116153545-19d2ae5b7518
 ## explicit; go 1.24.0
 github.com/pomerium/protoutil/fieldmasks
 github.com/pomerium/protoutil/messages
 github.com/pomerium/protoutil/protorand
 github.com/pomerium/protoutil/streams
 # github.com/pomerium/webauthn v0.0.0-20260116153041-d32e028c3f7e
 ## explicit; go 1.24.0
 github.com/pomerium/webauthn
 github.com/pomerium/webauthn/android
 github.com/pomerium/webauthn/cose
 github.com/pomerium/webauthn/fido
 github.com/pomerium/webauthn/tpm
 # github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55
 ## explicit; go 1.14
 github.com/power-devops/perfstat
 # github.com/prometheus/client_golang v1.23.2
 ## explicit; go 1.23.0
 github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil
 github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header
 github.com/prometheus/client_golang/prometheus
 github.com/prometheus/client_golang/prometheus/internal
 github.com/prometheus/client_golang/prometheus/promhttp
 github.com/prometheus/client_golang/prometheus/promhttp/internal
 # github.com/prometheus/client_model v0.6.2
 ## explicit; go 1.22.0
 github.com/prometheus/client_model/go
 # github.com/prometheus/common v0.67.5
 ## explicit; go 1.24.0
 github.com/prometheus/common/expfmt
 github.com/prometheus/common/model
 # github.com/prometheus/otlptranslator v1.0.0
 ## explicit; go 1.23.0
 github.com/prometheus/otlptranslator
-# github.com/prometheus/procfs v0.19.2
-## explicit; go 1.24.0
+# github.com/prometheus/procfs v0.20.1
+## explicit; go 1.25.0
 github.com/prometheus/procfs
 github.com/prometheus/procfs/internal/fs
 github.com/prometheus/procfs/internal/util
 # github.com/prometheus/statsd_exporter v0.22.7
 ## explicit; go 1.17
 github.com/prometheus/statsd_exporter/pkg/level
 github.com/prometheus/statsd_exporter/pkg/mapper
 github.com/prometheus/statsd_exporter/pkg/mapper/fsm
 # github.com/quic-go/qpack v0.6.0
 ## explicit; go 1.24
 github.com/quic-go/qpack
 # github.com/quic-go/quic-go v0.58.0
 ## explicit; go 1.24
 github.com/quic-go/quic-go
 github.com/quic-go/quic-go/http3
 github.com/quic-go/quic-go/http3/qlog
 github.com/quic-go/quic-go/internal/ackhandler
 github.com/quic-go/quic-go/internal/congestion
 github.com/quic-go/quic-go/internal/flowcontrol
 github.com/quic-go/quic-go/internal/handshake
 github.com/quic-go/quic-go/internal/monotime
 github.com/quic-go/quic-go/internal/protocol
 github.com/quic-go/quic-go/internal/qerr
 github.com/quic-go/quic-go/internal/utils
 github.com/quic-go/quic-go/internal/utils/linkedlist
 github.com/quic-go/quic-go/internal/utils/ringbuffer
 github.com/quic-go/quic-go/internal/wire
 github.com/quic-go/quic-go/qlog
 github.com/quic-go/quic-go/qlogwriter
 github.com/quic-go/quic-go/qlogwriter/jsontext
 github.com/quic-go/quic-go/quicvarint
 # github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9
 ## explicit
 github.com/rcrowley/go-metrics
 # github.com/rivo/uniseg v0.4.7
 ## explicit; go 1.18
 github.com/rivo/uniseg
 # github.com/rogpeppe/go-internal v1.14.1
 ## explicit; go 1.23
 github.com/rogpeppe/go-internal/fmtsort
 # github.com/rs/cors v1.11.1
 ## explicit; go 1.13
 github.com/rs/cors
 github.com/rs/cors/internal
 # github.com/rs/zerolog v1.34.0
 ## explicit; go 1.15
 github.com/rs/zerolog
 github.com/rs/zerolog/internal/cbor
 github.com/rs/zerolog/internal/json
 github.com/rs/zerolog/log
 # github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46
 ## explicit
 github.com/ryszard/goskiplist/skiplist
 # github.com/sagikazarmark/locafero v0.11.0
 ## explicit; go 1.23.0
 github.com/sagikazarmark/locafero
 # github.com/sahilm/fuzzy v0.1.1
 ## explicit
 github.com/sahilm/fuzzy
 # github.com/segmentio/asm v1.2.1
 ## explicit; go 1.18
 github.com/segmentio/asm/ascii
 github.com/segmentio/asm/base64
 github.com/segmentio/asm/cpu
 github.com/segmentio/asm/cpu/arm
 github.com/segmentio/asm/cpu/arm64
 github.com/segmentio/asm/cpu/cpuid
 github.com/segmentio/asm/cpu/x86
 github.com/segmentio/asm/internal/unsafebytes
 github.com/segmentio/asm/keyset
 # github.com/segmentio/encoding v0.5.4
 ## explicit; go 1.23
 github.com/segmentio/encoding/ascii
 github.com/segmentio/encoding/iso8601
 github.com/segmentio/encoding/json
 # github.com/shirou/gopsutil/v3 v3.24.5
 ## explicit; go 1.18
 github.com/shirou/gopsutil/v3/common
 github.com/shirou/gopsutil/v3/cpu
 github.com/shirou/gopsutil/v3/internal/common
 github.com/shirou/gopsutil/v3/mem
 github.com/shirou/gopsutil/v3/net
 github.com/shirou/gopsutil/v3/process
 # github.com/shirou/gopsutil/v4 v4.25.6
 ## explicit; go 1.23
 github.com/shirou/gopsutil/v4/common
 github.com/shirou/gopsutil/v4/cpu
 github.com/shirou/gopsutil/v4/internal/common
 github.com/shirou/gopsutil/v4/mem
 github.com/shirou/gopsutil/v4/net
 github.com/shirou/gopsutil/v4/process
 # github.com/shoenig/go-m1cpu v0.1.6
 ## explicit; go 1.20
 github.com/shoenig/go-m1cpu
 # github.com/shogo82148/go-sfv v0.3.3
 ## explicit; go 1.17
 github.com/shogo82148/go-sfv
 # github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af
 ## explicit; go 1.13
 github.com/sirupsen/logrus
 # github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8
 ## explicit; go 1.20
 github.com/sourcegraph/conc
 github.com/sourcegraph/conc/panics
 github.com/sourcegraph/conc/pool
 # github.com/spf13/afero v1.15.0
 ## explicit; go 1.23.0
 github.com/spf13/afero
 github.com/spf13/afero/internal/common
 github.com/spf13/afero/mem
 # github.com/spf13/cast v1.10.0
 ## explicit; go 1.21.0
 github.com/spf13/cast
 github.com/spf13/cast/internal
 # github.com/spf13/cobra v1.10.2
 ## explicit; go 1.15
 github.com/spf13/cobra
 # github.com/spf13/pflag v1.0.10
 ## explicit; go 1.12
 github.com/spf13/pflag
 # github.com/spf13/viper v1.21.0
 ## explicit; go 1.23.0
 github.com/spf13/viper
 github.com/spf13/viper/internal/encoding/dotenv
 github.com/spf13/viper/internal/encoding/json
 github.com/spf13/viper/internal/encoding/toml
 github.com/spf13/viper/internal/encoding/yaml
 github.com/spf13/viper/internal/features
 # github.com/spiffe/go-spiffe/v2 v2.6.0
 ## explicit; go 1.24.0
 github.com/spiffe/go-spiffe/v2/bundle/jwtbundle
 github.com/spiffe/go-spiffe/v2/bundle/spiffebundle
 github.com/spiffe/go-spiffe/v2/bundle/x509bundle
 github.com/spiffe/go-spiffe/v2/internal/cryptoutil
 github.com/spiffe/go-spiffe/v2/internal/jwtutil
 github.com/spiffe/go-spiffe/v2/internal/pemutil
 github.com/spiffe/go-spiffe/v2/internal/x509util
 github.com/spiffe/go-spiffe/v2/spiffeid
 # github.com/sryoya/protorand v0.0.0-20240429201223-e7440656b2a4
 ## explicit; go 1.17
 github.com/sryoya/protorand
 # github.com/stoewer/go-strcase v1.3.1
 ## explicit; go 1.11
 github.com/stoewer/go-strcase
 # github.com/stretchr/objx v0.5.2
 ## explicit; go 1.20
 github.com/stretchr/objx
 # github.com/stretchr/testify v1.11.1
 ## explicit; go 1.17
 github.com/stretchr/testify/assert
 github.com/stretchr/testify/assert/yaml
 github.com/stretchr/testify/mock
 github.com/stretchr/testify/require
 github.com/stretchr/testify/suite
 # github.com/subosito/gotenv v1.6.0
 ## explicit; go 1.18
 github.com/subosito/gotenv
 # github.com/tchap/go-patricia/v2 v2.3.3
 ## explicit; go 1.16
 github.com/tchap/go-patricia/v2/patricia
 # github.com/testcontainers/testcontainers-go v0.40.0
 ## explicit; go 1.24.0
 github.com/testcontainers/testcontainers-go
 github.com/testcontainers/testcontainers-go/exec
 github.com/testcontainers/testcontainers-go/internal
 github.com/testcontainers/testcontainers-go/internal/config
 github.com/testcontainers/testcontainers-go/internal/core
 github.com/testcontainers/testcontainers-go/internal/core/network
 github.com/testcontainers/testcontainers-go/log
 github.com/testcontainers/testcontainers-go/wait
 # github.com/tidwall/gjson v1.18.0
 ## explicit; go 1.12
 github.com/tidwall/gjson
 # github.com/tidwall/match v1.1.1
 ## explicit; go 1.15
 github.com/tidwall/match
 # github.com/tidwall/pretty v1.2.0
 ## explicit; go 1.16
 github.com/tidwall/pretty
 # github.com/tklauser/go-sysconf v0.3.14
 ## explicit; go 1.18
 github.com/tklauser/go-sysconf
 # github.com/tklauser/numcpus v0.8.0
 ## explicit; go 1.18
 github.com/tklauser/numcpus
 # github.com/tniswong/go.rfcx v0.0.0-20181019234604-07783c52761f
 ## explicit
 github.com/tniswong/go.rfcx/rfc7231
 # github.com/valyala/fastjson v1.6.4
 ## explicit; go 1.12
 github.com/valyala/fastjson
 github.com/valyala/fastjson/fastfloat
 # github.com/vektah/gqlparser/v2 v2.5.31
 ## explicit; go 1.22
 github.com/vektah/gqlparser/v2/ast
 github.com/vektah/gqlparser/v2/gqlerror
 github.com/vektah/gqlparser/v2/lexer
 github.com/vektah/gqlparser/v2/parser
 github.com/vektah/gqlparser/v2/validator
 github.com/vektah/gqlparser/v2/validator/core
 github.com/vektah/gqlparser/v2/validator/rules
 # github.com/volatiletech/null/v9 v9.0.0
 ## explicit; go 1.14
 github.com/volatiletech/null/v9
 github.com/volatiletech/null/v9/convert
 # github.com/weastur/hclog-zerolog v1.0.0
 ## explicit; go 1.24.1
 github.com/weastur/hclog-zerolog
 # github.com/x448/float16 v0.8.4
 ## explicit; go 1.11
 github.com/x448/float16
 # github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
 ## explicit
 github.com/xeipuuv/gojsonpointer
 # github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
 ## explicit
 github.com/xeipuuv/gojsonreference
 # github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
 ## explicit; go 1.19
 github.com/xo/terminfo
 # github.com/yashtewari/glob-intersection v0.2.0
 ## explicit; go 1.17
 github.com/yashtewari/glob-intersection
 # github.com/yosida95/uritemplate/v3 v3.0.2
 ## explicit; go 1.14
 github.com/yosida95/uritemplate/v3
 # github.com/yuin/gopher-lua v1.1.1
 ## explicit; go 1.17
 github.com/yuin/gopher-lua
 github.com/yuin/gopher-lua/ast
 github.com/yuin/gopher-lua/parse
 github.com/yuin/gopher-lua/pm
 # github.com/yusufpapurcu/wmi v1.2.4
 ## explicit; go 1.16
 github.com/yusufpapurcu/wmi
 # github.com/zeebo/assert v1.3.1
 ## explicit; go 1.13
 # github.com/zeebo/blake3 v0.2.4
 ## explicit; go 1.18
 github.com/zeebo/blake3
 github.com/zeebo/blake3/internal/alg
 github.com/zeebo/blake3/internal/alg/compress
 github.com/zeebo/blake3/internal/alg/compress/compress_pure
 github.com/zeebo/blake3/internal/alg/compress/compress_sse41
 github.com/zeebo/blake3/internal/alg/hash
 github.com/zeebo/blake3/internal/alg/hash/hash_avx2
 github.com/zeebo/blake3/internal/alg/hash/hash_pure
 github.com/zeebo/blake3/internal/consts
 github.com/zeebo/blake3/internal/utils
 # github.com/zeebo/xxh3 v1.0.2
 ## explicit; go 1.17
 github.com/zeebo/xxh3
 # go.opencensus.io v0.24.0
 ## explicit; go 1.13
 go.opencensus.io
 go.opencensus.io/internal
 go.opencensus.io/internal/tagencoding
 go.opencensus.io/metric
 go.opencensus.io/metric/metricdata
 go.opencensus.io/metric/metricexport
 go.opencensus.io/metric/metricproducer
 go.opencensus.io/plugin/ocgrpc
 go.opencensus.io/plugin/ochttp
 go.opencensus.io/plugin/ochttp/propagation/b3
 go.opencensus.io/resource
 go.opencensus.io/stats
 go.opencensus.io/stats/internal
 go.opencensus.io/stats/view
 go.opencensus.io/tag
 go.opencensus.io/trace
 go.opencensus.io/trace/internal
 go.opencensus.io/trace/propagation
 go.opencensus.io/trace/tracestate
 # go.opentelemetry.io/auto/sdk v1.2.1
 ## explicit; go 1.24.0
 go.opentelemetry.io/auto/sdk
 go.opentelemetry.io/auto/sdk/internal/telemetry
 # go.opentelemetry.io/contrib/detectors/gcp v1.39.0
 ## explicit; go 1.24.0
 go.opentelemetry.io/contrib/detectors/gcp
-# go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.64.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.68.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc/internal
-# go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/request
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconv
-# go.opentelemetry.io/contrib/propagators/autoprop v0.64.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/autoprop v0.68.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/autoprop
-# go.opentelemetry.io/contrib/propagators/aws v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/aws v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/aws/xray
-# go.opentelemetry.io/contrib/propagators/b3 v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/b3 v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/b3
-# go.opentelemetry.io/contrib/propagators/jaeger v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/jaeger v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/jaeger
-# go.opentelemetry.io/contrib/propagators/ot v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/ot v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/ot
-# go.opentelemetry.io/otel v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel
 go.opentelemetry.io/otel/attribute
 go.opentelemetry.io/otel/attribute/internal
 go.opentelemetry.io/otel/attribute/internal/xxhash
 go.opentelemetry.io/otel/baggage
 go.opentelemetry.io/otel/codes
 go.opentelemetry.io/otel/internal/baggage
+go.opentelemetry.io/otel/internal/errorhandler
 go.opentelemetry.io/otel/internal/global
 go.opentelemetry.io/otel/propagation
 go.opentelemetry.io/otel/semconv/internal
 go.opentelemetry.io/otel/semconv/v1.17.0
 go.opentelemetry.io/otel/semconv/v1.26.0
 go.opentelemetry.io/otel/semconv/v1.27.0
 go.opentelemetry.io/otel/semconv/v1.37.0
-go.opentelemetry.io/otel/semconv/v1.37.0/httpconv
-go.opentelemetry.io/otel/semconv/v1.37.0/otelconv
 go.opentelemetry.io/otel/semconv/v1.37.0/rpcconv
-go.opentelemetry.io/otel/semconv/v1.39.0
-go.opentelemetry.io/otel/semconv/v1.39.0/otelconv
 go.opentelemetry.io/otel/semconv/v1.4.0
-# go.opentelemetry.io/otel/bridge/opencensus v1.39.0
-## explicit; go 1.24.0
+go.opentelemetry.io/otel/semconv/v1.40.0
+go.opentelemetry.io/otel/semconv/v1.40.0/httpconv
+go.opentelemetry.io/otel/semconv/v1.40.0/otelconv
+go.opentelemetry.io/otel/semconv/v1.40.0/rpcconv
+# go.opentelemetry.io/otel/bridge/opencensus v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/bridge/opencensus
 go.opentelemetry.io/otel/bridge/opencensus/internal
 go.opentelemetry.io/otel/bridge/opencensus/internal/oc2otel
 go.opentelemetry.io/otel/bridge/opencensus/internal/ocmetric
 go.opentelemetry.io/otel/bridge/opencensus/internal/otel2oc
-# go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/envconfig
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/oconf
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/retry
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/transform
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlptrace
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/internal/tracetransform
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/counter
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/envconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/observ
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/otlpconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/retry
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/x
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/counter
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/envconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/observ
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/otlpconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/retry
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/x
-# go.opentelemetry.io/otel/exporters/prometheus v0.61.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/prometheus v0.65.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/prometheus
 go.opentelemetry.io/otel/exporters/prometheus/internal
 go.opentelemetry.io/otel/exporters/prometheus/internal/counter
 go.opentelemetry.io/otel/exporters/prometheus/internal/observ
 go.opentelemetry.io/otel/exporters/prometheus/internal/x
-# go.opentelemetry.io/otel/metric v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/metric v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/metric
 go.opentelemetry.io/otel/metric/embedded
 go.opentelemetry.io/otel/metric/noop
-# go.opentelemetry.io/otel/sdk v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/sdk v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/sdk
 go.opentelemetry.io/otel/sdk/instrumentation
 go.opentelemetry.io/otel/sdk/internal/x
 go.opentelemetry.io/otel/sdk/resource
 go.opentelemetry.io/otel/sdk/trace
 go.opentelemetry.io/otel/sdk/trace/internal/env
 go.opentelemetry.io/otel/sdk/trace/internal/observ
-# go.opentelemetry.io/otel/sdk/metric v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/sdk/metric v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/sdk/metric
 go.opentelemetry.io/otel/sdk/metric/exemplar
 go.opentelemetry.io/otel/sdk/metric/internal
 go.opentelemetry.io/otel/sdk/metric/internal/aggregate
 go.opentelemetry.io/otel/sdk/metric/internal/observ
 go.opentelemetry.io/otel/sdk/metric/internal/reservoir
 go.opentelemetry.io/otel/sdk/metric/metricdata
-# go.opentelemetry.io/otel/trace v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/trace v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/trace
 go.opentelemetry.io/otel/trace/embedded
 go.opentelemetry.io/otel/trace/internal/telemetry
 go.opentelemetry.io/otel/trace/noop
-# go.opentelemetry.io/proto/otlp v1.9.0
-## explicit; go 1.23.0
+# go.opentelemetry.io/proto/otlp v1.10.0
+## explicit; go 1.24.0
 go.opentelemetry.io/proto/otlp/collector/metrics/v1
 go.opentelemetry.io/proto/otlp/collector/trace/v1
 go.opentelemetry.io/proto/otlp/common/v1
 go.opentelemetry.io/proto/otlp/metrics/v1
 go.opentelemetry.io/proto/otlp/resource/v1
 go.opentelemetry.io/proto/otlp/trace/v1
 # go.shabbyrobe.org/gocovmerge v0.0.0-20230507111327-fa4f82cfbf4d
 ## explicit; go 1.20
 go.shabbyrobe.org/gocovmerge
 # go.uber.org/automaxprocs v1.6.0
 ## explicit; go 1.20
 go.uber.org/automaxprocs/internal/cgroups
 go.uber.org/automaxprocs/internal/runtime
 go.uber.org/automaxprocs/maxprocs
 # go.uber.org/mock v0.6.0
 ## explicit; go 1.23.0
 go.uber.org/mock/gomock
 # go.uber.org/multierr v1.11.0
 ## explicit; go 1.19
 go.uber.org/multierr
 # go.uber.org/zap v1.27.1
 ## explicit; go 1.19
 go.uber.org/zap
 go.uber.org/zap/buffer
 go.uber.org/zap/internal
 go.uber.org/zap/internal/bufferpool
 go.uber.org/zap/internal/color
 go.uber.org/zap/internal/exit
 go.uber.org/zap/internal/pool
 go.uber.org/zap/internal/stacktrace
 go.uber.org/zap/zapcore
 # go.uber.org/zap/exp v0.3.0
 ## explicit; go 1.19
 go.uber.org/zap/exp/zapslog
-# go.yaml.in/yaml/v2 v2.4.3
+# go.yaml.in/yaml/v2 v2.4.4
 ## explicit; go 1.15
 go.yaml.in/yaml/v2
 # go.yaml.in/yaml/v3 v3.0.4
 ## explicit; go 1.16
 go.yaml.in/yaml/v3
-# golang.org/x/crypto v0.47.0
-## explicit; go 1.24.0
+# golang.org/x/crypto v0.52.0
+## explicit; go 1.25.0
 golang.org/x/crypto/blake2b
 golang.org/x/crypto/blowfish
 golang.org/x/crypto/chacha20
 golang.org/x/crypto/chacha20poly1305
 golang.org/x/crypto/cryptobyte
 golang.org/x/crypto/cryptobyte/asn1
 golang.org/x/crypto/curve25519
 golang.org/x/crypto/hkdf
 golang.org/x/crypto/internal/alias
 golang.org/x/crypto/internal/poly1305
 golang.org/x/crypto/nacl/box
 golang.org/x/crypto/nacl/secretbox
 golang.org/x/crypto/ocsp
 golang.org/x/crypto/pbkdf2
 golang.org/x/crypto/salsa20/salsa
 golang.org/x/crypto/sha3
 golang.org/x/crypto/ssh
 golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
 # golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93
 ## explicit; go 1.24.0
 golang.org/x/exp/constraints
 golang.org/x/exp/maps
 golang.org/x/exp/slices
-# golang.org/x/mod v0.32.0
-## explicit; go 1.24.0
+# golang.org/x/mod v0.36.0
+## explicit; go 1.25.0
 golang.org/x/mod/internal/lazyregexp
 golang.org/x/mod/module
 golang.org/x/mod/semver
-# golang.org/x/net v0.49.0
-## explicit; go 1.24.0
+# golang.org/x/net v0.55.0
+## explicit; go 1.25.0
 golang.org/x/net/bpf
 golang.org/x/net/html
 golang.org/x/net/html/atom
 golang.org/x/net/http/httpguts
 golang.org/x/net/http2
 golang.org/x/net/http2/hpack
 golang.org/x/net/idna
 golang.org/x/net/internal/httpcommon
+golang.org/x/net/internal/httpsfv
 golang.org/x/net/internal/iana
 golang.org/x/net/internal/socket
 golang.org/x/net/internal/socks
 golang.org/x/net/internal/timeseries
 golang.org/x/net/ipv4
 golang.org/x/net/ipv6
 golang.org/x/net/nettest
 golang.org/x/net/proxy
 golang.org/x/net/publicsuffix
 golang.org/x/net/trace
-# golang.org/x/oauth2 v0.34.0
+# golang.org/x/oauth2 v0.35.0
 ## explicit; go 1.24.0
 golang.org/x/oauth2
 golang.org/x/oauth2/authhandler
 golang.org/x/oauth2/google
 golang.org/x/oauth2/google/externalaccount
 golang.org/x/oauth2/google/internal/externalaccountauthorizeduser
 golang.org/x/oauth2/google/internal/impersonate
 golang.org/x/oauth2/google/internal/stsexchange
 golang.org/x/oauth2/internal
 golang.org/x/oauth2/jws
 golang.org/x/oauth2/jwt
-# golang.org/x/sync v0.19.0
-## explicit; go 1.24.0
+# golang.org/x/sync v0.21.0
+## explicit; go 1.25.0
 golang.org/x/sync/errgroup
 golang.org/x/sync/semaphore
 golang.org/x/sync/singleflight
-# golang.org/x/sys v0.40.0
-## explicit; go 1.24.0
+# golang.org/x/sys v0.46.0
+## explicit; go 1.25.0
 golang.org/x/sys/cpu
 golang.org/x/sys/execabs
 golang.org/x/sys/plan9
 golang.org/x/sys/unix
 golang.org/x/sys/windows
 golang.org/x/sys/windows/registry
-# golang.org/x/term v0.39.0
-## explicit; go 1.24.0
+# golang.org/x/term v0.44.0
+## explicit; go 1.25.0
 golang.org/x/term
-# golang.org/x/text v0.33.0
-## explicit; go 1.24.0
+# golang.org/x/text v0.38.0
+## explicit; go 1.25.0
 golang.org/x/text/cases
 golang.org/x/text/encoding
 golang.org/x/text/encoding/internal
 golang.org/x/text/encoding/internal/identifier
 golang.org/x/text/encoding/unicode
 golang.org/x/text/feature/plural
 golang.org/x/text/internal
 golang.org/x/text/internal/catmsg
 golang.org/x/text/internal/format
 golang.org/x/text/internal/language
 golang.org/x/text/internal/language/compact
 golang.org/x/text/internal/number
 golang.org/x/text/internal/stringset
 golang.org/x/text/internal/tag
 golang.org/x/text/internal/utf8internal
 golang.org/x/text/language
 golang.org/x/text/message
 golang.org/x/text/message/catalog
 golang.org/x/text/runes
 golang.org/x/text/secure/bidirule
 golang.org/x/text/secure/precis
 golang.org/x/text/transform
 golang.org/x/text/unicode/bidi
 golang.org/x/text/unicode/norm
 golang.org/x/text/width
 # golang.org/x/time v0.14.0
 ## explicit; go 1.24.0
 golang.org/x/time/rate
-# golang.org/x/tools v0.41.0
-## explicit; go 1.24.0
+# golang.org/x/tools v0.45.0
+## explicit; go 1.25.0
 golang.org/x/tools/cover
 golang.org/x/tools/go/ast/edge
 golang.org/x/tools/go/ast/inspector
 golang.org/x/tools/go/gcexportdata
 golang.org/x/tools/go/packages
 golang.org/x/tools/go/types/objectpath
 golang.org/x/tools/go/types/typeutil
 golang.org/x/tools/internal/aliases
 golang.org/x/tools/internal/event
 golang.org/x/tools/internal/event/core
 golang.org/x/tools/internal/event/keys
 golang.org/x/tools/internal/event/label
 golang.org/x/tools/internal/gcimporter
 golang.org/x/tools/internal/gocommand
 golang.org/x/tools/internal/packagesinternal
 golang.org/x/tools/internal/pkgbits
 golang.org/x/tools/internal/stdlib
 golang.org/x/tools/internal/typeparams
 golang.org/x/tools/internal/typesinternal
 golang.org/x/tools/internal/versions
 # google.golang.org/api v0.258.0
 ## explicit; go 1.24.0
 google.golang.org/api/googleapi
 google.golang.org/api/googleapi/transport
 google.golang.org/api/iamcredentials/v1
 google.golang.org/api/idtoken
 google.golang.org/api/impersonate
 google.golang.org/api/internal
 google.golang.org/api/internal/cert
 google.golang.org/api/internal/credentialstype
 google.golang.org/api/internal/gensupport
 google.golang.org/api/internal/impersonate
 google.golang.org/api/internal/third_party/uritemplates
 google.golang.org/api/iterator
 google.golang.org/api/option
 google.golang.org/api/option/internaloption
 google.golang.org/api/storage/v1
 google.golang.org/api/transport
 google.golang.org/api/transport/grpc
 google.golang.org/api/transport/http
 # google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9
 ## explicit; go 1.24.0
 google.golang.org/genproto/googleapis/type/calendarperiod
 google.golang.org/genproto/googleapis/type/date
 google.golang.org/genproto/googleapis/type/expr
 google.golang.org/genproto/googleapis/type/timeofday
-# google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b
-## explicit; go 1.24.0
+# google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9
+## explicit; go 1.25.0
 google.golang.org/genproto/googleapis/api
 google.golang.org/genproto/googleapis/api/annotations
 google.golang.org/genproto/googleapis/api/distribution
 google.golang.org/genproto/googleapis/api/expr/v1alpha1
 google.golang.org/genproto/googleapis/api/httpbody
 google.golang.org/genproto/googleapis/api/label
 google.golang.org/genproto/googleapis/api/metric
 google.golang.org/genproto/googleapis/api/monitoredres
-# google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2
-## explicit; go 1.24.0
+# google.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d
+## explicit; go 1.25.0
 google.golang.org/genproto/googleapis/rpc/code
 google.golang.org/genproto/googleapis/rpc/errdetails
 google.golang.org/genproto/googleapis/rpc/status
-# google.golang.org/grpc v1.79.3
+# google.golang.org/grpc v1.80.0
 ## explicit; go 1.24.0
 google.golang.org/grpc
 google.golang.org/grpc/admin
 google.golang.org/grpc/attributes
 google.golang.org/grpc/authz/audit
 google.golang.org/grpc/authz/audit/stdout
 google.golang.org/grpc/backoff
 google.golang.org/grpc/balancer
 google.golang.org/grpc/balancer/base
 google.golang.org/grpc/balancer/endpointsharding
 google.golang.org/grpc/balancer/grpclb
 google.golang.org/grpc/balancer/grpclb/grpc_lb_v1
 google.golang.org/grpc/balancer/grpclb/state
 google.golang.org/grpc/balancer/lazy
 google.golang.org/grpc/balancer/leastrequest
 google.golang.org/grpc/balancer/pickfirst
 google.golang.org/grpc/balancer/pickfirst/internal
 google.golang.org/grpc/balancer/ringhash
 google.golang.org/grpc/balancer/rls
 google.golang.org/grpc/balancer/rls/internal/adaptive
 google.golang.org/grpc/balancer/rls/internal/keys
 google.golang.org/grpc/balancer/roundrobin
 google.golang.org/grpc/balancer/weightedroundrobin
 google.golang.org/grpc/balancer/weightedroundrobin/internal
 google.golang.org/grpc/balancer/weightedtarget
 google.golang.org/grpc/balancer/weightedtarget/weightedaggregator
 google.golang.org/grpc/benchmark/stats
 google.golang.org/grpc/binarylog/grpc_binarylog_v1
 google.golang.org/grpc/channelz
 google.golang.org/grpc/channelz/grpc_channelz_v1
 google.golang.org/grpc/channelz/internal/protoconv
 google.golang.org/grpc/channelz/service
 google.golang.org/grpc/codes
 google.golang.org/grpc/connectivity
 google.golang.org/grpc/credentials
 google.golang.org/grpc/credentials/alts
 google.golang.org/grpc/credentials/alts/internal
 google.golang.org/grpc/credentials/alts/internal/authinfo
 google.golang.org/grpc/credentials/alts/internal/conn
 google.golang.org/grpc/credentials/alts/internal/handshaker
 google.golang.org/grpc/credentials/alts/internal/handshaker/service
 google.golang.org/grpc/credentials/alts/internal/proto/grpc_gcp
 google.golang.org/grpc/credentials/google
 google.golang.org/grpc/credentials/insecure
 google.golang.org/grpc/credentials/jwt
 google.golang.org/grpc/credentials/oauth
 google.golang.org/grpc/credentials/tls/certprovider
 google.golang.org/grpc/credentials/tls/certprovider/pemfile
 google.golang.org/grpc/encoding
 google.golang.org/grpc/encoding/gzip
 google.golang.org/grpc/encoding/internal
 google.golang.org/grpc/encoding/proto
 google.golang.org/grpc/experimental/opentelemetry
 google.golang.org/grpc/experimental/stats
 google.golang.org/grpc/grpclog
 google.golang.org/grpc/grpclog/internal
 google.golang.org/grpc/health
 google.golang.org/grpc/health/grpc_health_v1
 google.golang.org/grpc/internal
 google.golang.org/grpc/internal/admin
 google.golang.org/grpc/internal/backoff
 google.golang.org/grpc/internal/balancer/gracefulswitch
 google.golang.org/grpc/internal/balancer/nop
 google.golang.org/grpc/internal/balancer/weight
 google.golang.org/grpc/internal/balancergroup
 google.golang.org/grpc/internal/balancerload
 google.golang.org/grpc/internal/binarylog
 google.golang.org/grpc/internal/buffer
 google.golang.org/grpc/internal/cache
 google.golang.org/grpc/internal/channelz
 google.golang.org/grpc/internal/credentials
 google.golang.org/grpc/internal/credentials/spiffe
 google.golang.org/grpc/internal/credentials/xds
 google.golang.org/grpc/internal/envconfig
 google.golang.org/grpc/internal/googlecloud
 google.golang.org/grpc/internal/grpclog
 google.golang.org/grpc/internal/grpcsync
 google.golang.org/grpc/internal/grpcutil
 google.golang.org/grpc/internal/hierarchy
 google.golang.org/grpc/internal/idle
+google.golang.org/grpc/internal/mem
 google.golang.org/grpc/internal/metadata
 google.golang.org/grpc/internal/pretty
 google.golang.org/grpc/internal/proto/grpc_lookup_v1
 google.golang.org/grpc/internal/proxyattributes
 google.golang.org/grpc/internal/resolver
 google.golang.org/grpc/internal/resolver/delegatingresolver
 google.golang.org/grpc/internal/resolver/dns
 google.golang.org/grpc/internal/resolver/dns/internal
 google.golang.org/grpc/internal/resolver/passthrough
 google.golang.org/grpc/internal/resolver/unix
 google.golang.org/grpc/internal/ringhash
 google.golang.org/grpc/internal/serviceconfig
 google.golang.org/grpc/internal/stats
 google.golang.org/grpc/internal/status
 google.golang.org/grpc/internal/syscall
 google.golang.org/grpc/internal/transport
 google.golang.org/grpc/internal/transport/networktype
 google.golang.org/grpc/internal/wrr
 google.golang.org/grpc/internal/xds
 google.golang.org/grpc/internal/xds/balancer
 google.golang.org/grpc/internal/xds/balancer/cdsbalancer
 google.golang.org/grpc/internal/xds/balancer/clusterimpl
 google.golang.org/grpc/internal/xds/balancer/clustermanager
-google.golang.org/grpc/internal/xds/balancer/clusterresolver
 google.golang.org/grpc/internal/xds/balancer/loadstore
 google.golang.org/grpc/internal/xds/balancer/outlierdetection
 google.golang.org/grpc/internal/xds/balancer/priority
 google.golang.org/grpc/internal/xds/balancer/wrrlocality
 google.golang.org/grpc/internal/xds/bootstrap
 google.golang.org/grpc/internal/xds/bootstrap/jwtcreds
 google.golang.org/grpc/internal/xds/bootstrap/tlscreds
 google.golang.org/grpc/internal/xds/clients
 google.golang.org/grpc/internal/xds/clients/grpctransport
 google.golang.org/grpc/internal/xds/clients/internal
 google.golang.org/grpc/internal/xds/clients/internal/backoff
 google.golang.org/grpc/internal/xds/clients/internal/buffer
 google.golang.org/grpc/internal/xds/clients/internal/pretty
 google.golang.org/grpc/internal/xds/clients/internal/syncutil
 google.golang.org/grpc/internal/xds/clients/lrsclient
 google.golang.org/grpc/internal/xds/clients/lrsclient/internal
 google.golang.org/grpc/internal/xds/clients/xdsclient
 google.golang.org/grpc/internal/xds/clients/xdsclient/internal
 google.golang.org/grpc/internal/xds/clients/xdsclient/internal/xdsresource
 google.golang.org/grpc/internal/xds/clients/xdsclient/metrics
 google.golang.org/grpc/internal/xds/clusterspecifier
 google.golang.org/grpc/internal/xds/clusterspecifier/rls
 google.golang.org/grpc/internal/xds/httpfilter
 google.golang.org/grpc/internal/xds/httpfilter/fault
 google.golang.org/grpc/internal/xds/httpfilter/rbac
 google.golang.org/grpc/internal/xds/httpfilter/router
 google.golang.org/grpc/internal/xds/matcher
 google.golang.org/grpc/internal/xds/rbac
 google.golang.org/grpc/internal/xds/resolver
 google.golang.org/grpc/internal/xds/resolver/internal
 google.golang.org/grpc/internal/xds/server
 google.golang.org/grpc/internal/xds/xdsclient
 google.golang.org/grpc/internal/xds/xdsclient/xdslbregistry
 google.golang.org/grpc/internal/xds/xdsclient/xdslbregistry/converter
 google.golang.org/grpc/internal/xds/xdsclient/xdsresource
 google.golang.org/grpc/internal/xds/xdsclient/xdsresource/version
 google.golang.org/grpc/internal/xds/xdsdepmgr
 google.golang.org/grpc/interop
 google.golang.org/grpc/interop/grpc_testing
 google.golang.org/grpc/interop/grpc_testing/core
 google.golang.org/grpc/keepalive
 google.golang.org/grpc/mem
 google.golang.org/grpc/metadata
 google.golang.org/grpc/orca
 google.golang.org/grpc/orca/internal
 google.golang.org/grpc/peer
 google.golang.org/grpc/reflection
 google.golang.org/grpc/reflection/grpc_reflection_v1
 google.golang.org/grpc/reflection/grpc_reflection_v1alpha
 google.golang.org/grpc/reflection/internal
 google.golang.org/grpc/resolver
 google.golang.org/grpc/resolver/dns
 google.golang.org/grpc/resolver/manual
 google.golang.org/grpc/resolver/ringhash
 google.golang.org/grpc/serviceconfig
 google.golang.org/grpc/stats
 google.golang.org/grpc/stats/opentelemetry
 google.golang.org/grpc/stats/opentelemetry/internal
 google.golang.org/grpc/stats/opentelemetry/internal/tracing
 google.golang.org/grpc/status
 google.golang.org/grpc/tap
 google.golang.org/grpc/test/bufconn
 google.golang.org/grpc/xds
 google.golang.org/grpc/xds/bootstrap
 google.golang.org/grpc/xds/csds
 google.golang.org/grpc/xds/googledirectpath
 # google.golang.org/protobuf v1.36.11
 ## explicit; go 1.23
 google.golang.org/protobuf/encoding/protodelim
 google.golang.org/protobuf/encoding/protojson
 google.golang.org/protobuf/encoding/prototext
 google.golang.org/protobuf/encoding/protowire
 google.golang.org/protobuf/internal/descfmt
 google.golang.org/protobuf/internal/descopts
 google.golang.org/protobuf/internal/detrand
 google.golang.org/protobuf/internal/editiondefaults
 google.golang.org/protobuf/internal/editionssupport
 google.golang.org/protobuf/internal/encoding/defval
 google.golang.org/protobuf/internal/encoding/json
 google.golang.org/protobuf/internal/encoding/messageset
 google.golang.org/protobuf/internal/encoding/tag
 google.golang.org/protobuf/internal/encoding/text
 google.golang.org/protobuf/internal/errors
 google.golang.org/protobuf/internal/filedesc
 google.golang.org/protobuf/internal/filetype
 google.golang.org/protobuf/internal/flags
 google.golang.org/protobuf/internal/genid
 google.golang.org/protobuf/internal/impl
 google.golang.org/protobuf/internal/msgfmt
 google.golang.org/protobuf/internal/order
 google.golang.org/protobuf/internal/pragma
 google.golang.org/protobuf/internal/protolazy
 google.golang.org/protobuf/internal/set
 google.golang.org/protobuf/internal/strs
 google.golang.org/protobuf/internal/version
 google.golang.org/protobuf/proto
 google.golang.org/protobuf/protoadapt
 google.golang.org/protobuf/reflect/protodesc
 google.golang.org/protobuf/reflect/protopath
 google.golang.org/protobuf/reflect/protorange
 google.golang.org/protobuf/reflect/protoreflect
 google.golang.org/protobuf/reflect/protoregistry
 google.golang.org/protobuf/runtime/protoiface
 google.golang.org/protobuf/runtime/protoimpl
 google.golang.org/protobuf/testing/protocmp
 google.golang.org/protobuf/types/descriptorpb
 google.golang.org/protobuf/types/dynamicpb
 google.golang.org/protobuf/types/gofeaturespb
 google.golang.org/protobuf/types/known/anypb
 google.golang.org/protobuf/types/known/apipb
 google.golang.org/protobuf/types/known/durationpb
 google.golang.org/protobuf/types/known/emptypb
 google.golang.org/protobuf/types/known/fieldmaskpb
 google.golang.org/protobuf/types/known/sourcecontextpb
 google.golang.org/protobuf/types/known/structpb
 google.golang.org/protobuf/types/known/timestamppb
 google.golang.org/protobuf/types/known/typepb
 google.golang.org/protobuf/types/known/wrapperspb
 # gopkg.in/yaml.v2 v2.4.0
 ## explicit; go 1.15
 gopkg.in/yaml.v2
 # gopkg.in/yaml.v3 v3.0.1
 ## explicit
 gopkg.in/yaml.v3
 # sigs.k8s.io/yaml v1.6.0
 ## explicit; go 1.22
 sigs.k8s.io/yaml