From 6831467d67a21ae8ee13e7c4430127480b68c1e4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 16 Sep 2026 15:58:57 +0000
Subject: [PATCH] chore(deps): bump the all group in /release with 3 updates

Bumps the all group in /release with 3 updates: [chainguard/crane](https://github.com/chainguard-images/images), [tektoncd/plumbing/ko](https://github.com/tektoncd/plumbing) and [tektoncd/plumbing/koparse](https://github.com/tektoncd/plumbing).


Updates `chainguard/crane` from `159ce4f` to `5db7b26`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `tektoncd/plumbing/ko` from `579038f` to `90b7fd2`
- [Commits](https://github.com/tektoncd/plumbing/commits)

Updates `tektoncd/plumbing/koparse` from `205c228` to `73a2f2d`
- [Commits](https://github.com/tektoncd/plumbing/commits)

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/ko
  dependency-version: 90b7fd2b7c7e5358e7ce1ffa9a5e557dd2dfef27711a6950c302e10368f1518f
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/koparse
  dependency-version: 73a2f2da52c7314616322fcd0a1f10d0ae44a8aeac08a2b36deea147aed0e208
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 release/publish.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/release/publish.yaml b/release/publish.yaml
index f2e50feb4f..a064ad40b2 100644
--- a/release/publish.yaml
+++ b/release/publish.yaml
@@ -89,7 +89,7 @@ spec:
   steps:
 
   - name: container-registry-auth
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:159ce4fa16bda6a9465432b9b20b7a1407f3d624a45192cf88507d46cbfc6713
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:5db7b263db812f895a14aece5150cb5385e4d65f2770632b53b1cd4f9cdd4431
     script: |
       #!/bin/sh
       set -ex
@@ -109,7 +109,7 @@ spec:
 
 
   - name: run-ko
-    image: ghcr.io/tektoncd/plumbing/ko@sha256:579038ff50b7adbfa258fb31bbffa53277ba60b86ae5fe275481d4179cf51901
+    image: ghcr.io/tektoncd/plumbing/ko@sha256:90b7fd2b7c7e5358e7ce1ffa9a5e557dd2dfef27711a6950c302e10368f1518f
     env:
     - name: KO_DOCKER_REPO
       value: $(params.imageRegistry)/$(params.imageRegistryPath)
@@ -173,7 +173,7 @@ spec:
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.yaml
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.notags.yaml
   - name: koparse
-    image: ghcr.io/tektoncd/plumbing/koparse@sha256:205c2285a772f333f8c508d8c1a335fc7b19c812df76774d50d9d108f1d80144
+    image: ghcr.io/tektoncd/plumbing/koparse@sha256:73a2f2da52c7314616322fcd0a1f10d0ae44a8aeac08a2b36deea147aed0e208
     script: |
       set -ex
 
@@ -207,7 +207,7 @@ spec:
         ${PRESERVE_IMPORT_PATH} > /workspace/built_images
 
   - name: tag-images
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:159ce4fa16bda6a9465432b9b20b7a1407f3d624a45192cf88507d46cbfc6713
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:5db7b263db812f895a14aece5150cb5385e4d65f2770632b53b1cd4f9cdd4431
     script: |
       #!/bin/sh
       set -ex