chore: update dependencies

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

client/go.mod

@@ -4,10 +4,10 @@ go 1.25.2
 
 // forked go-yaml that introduces RawYAML interface, which can be used to populate YAML fields using bytes
 // which are then encoded as a valid YAML blocks with proper indentiation
-replace gopkg.in/yaml.v3 => github.com/unix4ever/yaml v0.0.0-20220527175918-f17b0f05cf2c
+replace gopkg.in/yaml.v3 => github.com/unix4ever/yaml/v2 v2.4.0
 
 require (
-	github.com/ProtonMail/gopenpgp/v2 v2.9.0
+	github.com/ProtonMail/gopenpgp/v3 v3.3.0
 	github.com/adrg/xdg v0.5.3
 	github.com/blang/semver/v4 v4.0.0
 	github.com/containers/image/v5 v5.36.2
@@ -21,12 +21,12 @@ require (
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/hexops/gotextdiff v1.0.3
 	github.com/jxskiss/base62 v1.1.0
-	github.com/klauspost/compress v1.18.0
+	github.com/klauspost/compress v1.18.1
 	github.com/mattn/go-isatty v0.0.20
-	github.com/planetscale/vtprotobuf v0.6.1-0.20241121165744-79df5c4772f2
+	github.com/planetscale/vtprotobuf ba97887b0a25
 	github.com/sergi/go-diff v1.4.0
 	github.com/siderolabs/gen v0.8.5
-	github.com/siderolabs/go-api-signature v0.3.9
+	github.com/siderolabs/go-api-signature v0.3.10
 	github.com/siderolabs/go-kubeconfig v0.1.1
 	github.com/siderolabs/go-pointer v1.0.1
 	github.com/siderolabs/image-factory v0.8.4
@@ -40,12 +40,12 @@ require (
 	golang.org/x/term v0.36.0
 	google.golang.org/grpc v1.76.0
 	google.golang.org/protobuf v1.36.10
-	gopkg.in/yaml.v2 v2.4.0
+	gopkg.in/yaml.v3 v3.0.1
 	gopkg.in/yaml.v3 v3.0.3
-	k8s.io/client-go v0.35.0-alpha.1
+	k8s.io/client-go v11.0.0+incompatible
 )
 
-require github.com/siderolabs/talos/pkg/machinery v1.12.0-alpha.1.0.20251017073026-8124efb42fd5
+require github.com/siderolabs/talos/pkg/machinery v1.12.0-alpha.2
 
 require (
 	cel.dev/expr v0.24.0 // indirect

frontend/package.json

@@ -59,8 +59,8 @@
     "@eslint/compat": "^1.4.0",
     "@faker-js/faker": "^10.1.0",
     "@playwright/test": "^1.56.1",
-    "@storybook/addon-a11y": "^9.1.13",
-    "@storybook/vue3-vite": "^9.1.13",
+    "@storybook/addon-a11y": "^10.0.0",
+    "@storybook/vue3-vite": "^10.0.0",
     "@tailwindcss/vite": "^4.1.15",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/user-event": "^14.6.1",
@@ -82,7 +82,7 @@
     "eslint": "^9.38.0",
     "eslint-plugin-playwright": "^2.2.2",
     "eslint-plugin-simple-import-sort": "^12.1.1",
-    "eslint-plugin-storybook": "^9.1.13",
+    "eslint-plugin-storybook": "^10.0.0",
     "eslint-plugin-vue": "^10.5.1",
     "jsdom": "^27.0.1",
     "json-diff-ts": "^4.8.2",
@@ -93,7 +93,7 @@
     "openpgp": "^6.2.2",
     "prettier": "^3.6.2",
     "prettier-plugin-tailwindcss": "^0.7.1",
-    "storybook": "^9.1.13",
+    "storybook": "^10.0.0",
     "storybook-vue3-router": "^6.0.2",
     "tailwindcss": "^4.1.15",
     "typescript": "^5.9.3",

go.mod

@@ -4,25 +4,25 @@ go 1.25.2
 
 replace (
 	// forked saml library that has the fix for Fusion Auth ACS parsing
-	github.com/crewjam/saml => github.com/unix4ever/saml v0.0.0-20250630213700-66b137182abe
+	github.com/crewjam/saml => github.com/unix4ever/saml 34930b26d33b
 	// use nested module
 	github.com/siderolabs/omni/client => ./client
 	// forked go-yaml that introduces RawYAML interface, which can be used to populate YAML fields using bytes
 	// which are then encoded as a valid YAML blocks with proper indentiation
-	gopkg.in/yaml.v3 => github.com/unix4ever/yaml v0.0.0-20220527175918-f17b0f05cf2c
+	gopkg.in/yaml.v3 => github.com/unix4ever/yaml/v2 v2.4.0
 )
 
 require (
 	filippo.io/age v1.2.1
-	github.com/ProtonMail/gopenpgp/v2 v2.9.0
+	github.com/ProtonMail/gopenpgp/v3 v3.3.0
 	github.com/adrg/xdg v0.5.3 // indirect
 	github.com/akutz/memconn v0.1.1-0.20211110233653-dae351d188b3
 	github.com/auth0/go-jwt-middleware/v2 v2.3.0
-	github.com/aws/aws-sdk-go-v2 v1.39.3
-	github.com/aws/aws-sdk-go-v2/config v1.31.12
-	github.com/aws/aws-sdk-go-v2/credentials v1.18.16
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.19.12
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.88.4
+	github.com/aws/aws-sdk-go-v2 v1.39.4
+	github.com/aws/aws-sdk-go-v2/config v1.31.15
+	github.com/aws/aws-sdk-go-v2/credentials v1.18.19
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.1
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.89.0
 	github.com/aws/smithy-go v1.23.1
 	github.com/benbjohnson/clock v1.3.5
 	github.com/blang/semver/v4 v4.0.0
@@ -41,11 +41,11 @@ require (
 	github.com/go-logr/logr v1.4.3
 	github.com/go-logr/zapr v1.3.0
 	github.com/go-playground/validator/v10 v10.28.0
-	github.com/golang-jwt/jwt/v4 v4.5.2
+	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/google/go-cmp v0.7.0
 	github.com/google/go-containerregistry v0.20.6
 	github.com/google/uuid v1.6.0
-	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
+	github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2
 	github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3
 	github.com/hashicorp/go-cleanhttp v0.5.2
@@ -57,10 +57,10 @@ require (
 	github.com/johannesboyne/gofakes3 v0.0.0-20250916175020-ebf3e50324d3
 	github.com/jonboulle/clockwork v0.5.0
 	github.com/julienschmidt/httprouter v1.3.0
-	github.com/klauspost/compress v1.18.0
+	github.com/klauspost/compress v1.18.1
 	github.com/mattn/go-shellwords v1.0.12
 	github.com/prometheus/client_golang v1.23.2
-	github.com/prometheus/common v0.67.1
+	github.com/prometheus/common v0.67.2
 	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
 	github.com/siderolabs/crypto v0.6.4
 	github.com/siderolabs/discovery-api v0.1.6
@@ -70,7 +70,7 @@ require (
 	github.com/siderolabs/go-api-signature v0.3.10
 	github.com/siderolabs/go-circular v0.2.3
 	github.com/siderolabs/go-debug v0.6.1
-	github.com/siderolabs/go-kubernetes v0.2.26
+	github.com/siderolabs/go-kubernetes v0.2.27
 	github.com/siderolabs/go-loadbalancer v0.5.0
 	github.com/siderolabs/go-pointer v1.0.1
 	github.com/siderolabs/go-procfs v0.1.2
@@ -109,16 +109,16 @@ require (
 	google.golang.org/grpc v1.76.0
 	google.golang.org/protobuf v1.36.10
 	gopkg.in/yaml.v3 v3.0.3
-	k8s.io/api v0.35.0-alpha.1
-	k8s.io/apimachinery v0.35.0-alpha.1
-	k8s.io/client-go v0.35.0-alpha.1
+	k8s.io/api v0.35.0-alpha.2
+	k8s.io/apimachinery v0.35.0-alpha.2
+	k8s.io/client-go v11.0.0+incompatible
 	k8s.io/klog/v2 v2.130.1
 	sigs.k8s.io/controller-runtime v0.22.3
 )
 
 require (
 	github.com/siderolabs/talos v1.11.3
-	github.com/siderolabs/talos/pkg/machinery v1.12.0-alpha.1.0.20251017073026-8124efb42fd5
+	github.com/siderolabs/talos/pkg/machinery v1.12.0-alpha.2
 )
 
 require (

hack/compose/docker-compose.yml

@@ -58,7 +58,7 @@ services:
 
   vault-dev:
     container_name: local-vault
-    image: hashicorp/vault:1.18
+    image: hashicorp/vault:1.21
     environment:
       - VAULT_DEV_ROOT_TOKEN_ID=dev-o-token
     cap_add:
@@ -71,7 +71,7 @@ services:
       - vault-dev
     restart: on-failure
     container_name: local-vault-init
-    image: hashicorp/vault:1.18
+    image: hashicorp/vault:1.21
     volumes:
       - ../../internal/backend/runtime/omni/testdata/pgp/new_key.private:/tmp/key.private:ro
     environment:
@@ -87,7 +87,7 @@ services:
   node-dev:
     network_mode: host
     container_name: local-node
-    image: node:24.11.0-alpine
+    image: node:25.0.0-alpine
     volumes:
       - ../../frontend:/app:rw
     working_dir: /app

hack/zstd-dict/go.mod

@@ -3,7 +3,7 @@ module github.com/siderolabs/omni-hack-zstd-dict
 go 1.25.2
 
 require (
-	github.com/klauspost/compress v1.18.0
+	github.com/klauspost/compress v1.18.1
 	github.com/mittwald/go-helm-client v0.12.18
 	go.uber.org/zap v1.27.0
 	gopkg.in/yaml.v3 v3.0.1