Update module github.com/google/ko to v0.19.0

[ske-renovate-operator]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/ko	v0.18.1 → v0.19.0

---

Release Notes

google/ko (github.com/google/ko)

v0.19.0

Compare Source

What's Changed

• Add repeatable --ldflags flag for go build by @​imjasonh in ko-build#1680
• fix: apply defaultFlags before flag manipulation in .ko.yaml by @​mateenali66 in ko-build#1612
• fix: write directory headers in kodata tar archives by @​0xiso in ko-build#1604
• security: reject -toolexec in GOFLAGS environment variable by @​mohammadmseet-hue in ko-build#1618
• build: prevent kodata symlinks from escaping the kodata root by @​evilgensec in ko-build#1619
• fix: correct --sbom-dir flag description (file → directory) by @​immanuwell in ko-build#1648

New Contributors

• @​ajayk made their first contribution in ko-build#1606
• @​mateenali66 made their first contribution in ko-build#1612
• @​mohammadmseet-hue made their first contribution in ko-build#1618
• @​alexandear made their first contribution in ko-build#1621
• @​evilgensec made their first contribution in ko-build#1619
• @​immanuwell made their first contribution in ko-build#1648
• @​SebTardif made their first contribution in ko-build#1664

Full Changelog: ko-build/ko@v0.18.1...v0.19.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[ske-renovate-operator]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 56 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26.0 -> 1.26.3
github.com/aws/aws-sdk-go-v2	v1.41.0 -> v1.41.4
github.com/aws/aws-sdk-go-v2/config	v1.32.5 -> v1.32.12
github.com/aws/aws-sdk-go-v2/credentials	v1.19.5 -> v1.19.12
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.16 -> v1.18.20
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.16 -> v1.4.20
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.16 -> v2.7.20
github.com/aws/aws-sdk-go-v2/internal/ini	v1.8.4 -> v1.8.6
github.com/aws/aws-sdk-go-v2/service/ecr	v1.54.4 -> v1.56.0
github.com/aws/aws-sdk-go-v2/service/ecrpublic	v1.38.8 -> v1.38.11
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.4 -> v1.13.7
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.16 -> v1.13.20
github.com/aws/aws-sdk-go-v2/service/signin	v1.0.4 -> v1.0.8
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.7 -> v1.30.13
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.12 -> v1.35.17
github.com/aws/aws-sdk-go-v2/service/sts	v1.41.5 -> v1.41.9
github.com/aws/smithy-go	v1.24.0 -> v1.24.2
github.com/awslabs/amazon-ecr-credential-helper/ecr-login	v0.11.0 -> v0.12.0
github.com/containerd/stargz-snapshotter/estargz	v0.18.1 -> v0.18.2
github.com/docker/cli	v29.1.3+incompatible -> v29.4.0+incompatible
github.com/docker/go-connections	v0.6.0 -> v0.7.0
github.com/dprotaso/go-yit	v0.0.0-20250513223454-5ece0c5aa76c -> v0.0.0-20260209000607-dfb86291624d
github.com/go-jose/go-jose/v4	v4.1.3 -> v4.1.4
github.com/go-openapi/analysis	v0.24.1 -> v0.24.3
github.com/go-openapi/errors	v0.22.5 -> v0.22.7
github.com/go-openapi/jsonpointer	v0.22.4 -> v0.22.5
github.com/go-openapi/jsonreference	v0.21.4 -> v0.21.5
github.com/go-openapi/loads	v0.23.2 -> v0.23.3
github.com/go-openapi/runtime	v0.29.2 -> v0.29.3
github.com/go-openapi/spec	v0.22.2 -> v0.22.4
github.com/go-openapi/strfmt	v0.25.0 -> v0.26.1
github.com/go-openapi/swag	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/cmdutils	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/conv	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/fileutils	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/jsonname	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/jsonutils	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/loading	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/mangling	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/netutils	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/stringutils	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/typeutils	v0.25.4 -> v0.25.5
github.com/go-openapi/swag/yamlutils	v0.25.4 -> v0.25.5
github.com/go-openapi/validate	v0.25.1 -> v0.25.2
github.com/google/certificate-transparency-go	v1.3.2 -> v1.3.3
github.com/google/go-containerregistry	v0.20.7 -> v0.21.5
github.com/in-toto/in-toto-golang	v0.9.0 -> v0.11.0
github.com/klauspost/compress	v1.18.4 -> v1.18.5
github.com/secure-systems-lab/go-securesystemslib	v0.9.1 -> v0.10.0
github.com/sigstore/rekor	v1.4.3 -> v1.5.1
github.com/sigstore/rekor-tiles/v2	v2.0.1 -> v2.2.1
github.com/sigstore/sigstore	v1.10.3 -> v1.10.5
github.com/sigstore/timestamp-authority/v2	v2.0.3 -> v2.0.6
github.com/theupdateframework/go-tuf/v2	v2.3.0 -> v2.4.1
github.com/transparency-dev/formats	v0.0.0-20251208091212-1378f9e1b1b7 -> v0.1.0
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
sigs.k8s.io/kind	v0.30.0 -> v0.31.0

[ske-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign relusc for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment