fix(deps): update module github.com/google/ko to v0.19.1 (main)

[crossplane-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/ko	v0.18.1 → v0.19.1

---

Release Notes

google/ko (github.com/google/ko)

v0.19.1

Compare Source

What's Changed

• fix: skip yaml encoding when selector filters all documents by @​khrm in ko-build#1694

Deps

• build(deps): bump the github-actions group with 11 updates by @​dependabot[bot] in ko-build#1691
• build(deps): bump github.com/sigstore/rekor from 1.5.1 to 1.5.2 by @​dependabot[bot] in ko-build#1692
• build(deps): bump the gomod group across 1 directory with 9 updates by @​dependabot[bot] in ko-build#1688

New Contributors

• @​khrm made their first contribution in ko-build#1694

Full Changelog: ko-build/ko@v0.19.0...v0.19.1

v0.19.0

Compare Source

What's Changed

• Add repeatable --ldflags flag for go build by @​imjasonh in ko-build#1680
• fix: apply defaultFlags before flag manipulation in .ko.yaml by @​mateenali66 in ko-build#1612
• fix: write directory headers in kodata tar archives by @​0xiso in ko-build#1604
• security: reject -toolexec in GOFLAGS environment variable by @​mohammadmseet-hue in ko-build#1618
• build: prevent kodata symlinks from escaping the kodata root by @​evilgensec in ko-build#1619
• fix: correct --sbom-dir flag description (file → directory) by @​immanuwell in ko-build#1648

New Contributors

• @​ajayk made their first contribution in ko-build#1606
• @​mateenali66 made their first contribution in ko-build#1612
• @​mohammadmseet-hue made their first contribution in ko-build#1618
• @​alexandear made their first contribution in ko-build#1621
• @​evilgensec made their first contribution in ko-build#1619
• @​immanuwell made their first contribution in ko-build#1648
• @​SebTardif made their first contribution in ko-build#1664

Full Changelog: ko-build/ko@v0.18.1...v0.19.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[crossplane-renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/google/ko@v0.19.1 requires go >= 1.26.3; switching to go1.26.6
go: downloading go1.26.6 (linux/amd64)
go: downloading k8s.io/apimachinery v0.36.2
go: downloading k8s.io/api v0.36.1
go: downloading k8s.io/client-go v0.36.1
go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a
go: downloading sigs.k8s.io/kind v0.32.0
go: downloading github.com/google/ko v0.19.1
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading github.com/moby/moby/client v0.5.0
go: downloading github.com/sigstore/cosign/v3 v3.1.1
go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.6
go: downloading github.com/go-openapi/swag/conv v0.26.1
go: downloading github.com/go-openapi/swag/typeutils v0.26.1
go: downloading github.com/theupdateframework/go-tuf/v2 v2.4.2
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.18
go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.56.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.11
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading k8s.io/streaming v0.36.2
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.17
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0
go: downloading github.com/coreos/go-oidc/v3 v3.18.0
go: downloading github.com/dprotaso/go-yit v0.0.0-20260209000607-dfb86291624d
go: downloading k8s.io/api v0.36.3
go: github.com/crossplane/cli/v2/internal/project/helm imports
	helm.sh/helm/v3/pkg/action imports
	helm.sh/helm/v3/pkg/kube imports
	k8s.io/kubectl/pkg/cmd/util imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
go: downloading github.com/google/ko v0.19.1
go: downloading k8s.io/apimachinery v0.36.2
go: downloading k8s.io/api v0.36.1
go: downloading k8s.io/client-go v0.36.1
go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a
go: downloading sigs.k8s.io/kind v0.32.0
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading github.com/onsi/gomega v1.39.1
go: downloading github.com/moby/moby/client v0.5.0
go: downloading github.com/sigstore/cosign/v3 v3.1.1
go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.6
go: downloading github.com/go-openapi/swag/conv v0.26.1
go: downloading github.com/go-openapi/swag/typeutils v0.26.1
go: downloading github.com/theupdateframework/go-tuf/v2 v2.4.2
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.18
go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.11
go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.56.0
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading k8s.io/streaming v0.36.2
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.68.0
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.17
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.0
go: downloading github.com/coreos/go-oidc/v3 v3.18.0
go: downloading github.com/dprotaso/go-yit v0.0.0-20260209000607-dfb86291624d
go: downloading google.golang.org/api v0.283.0
go: downloading google.golang.org/genproto v0.0.0-20260406210006-6f92a3bedf2d
go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.16
go: finding module for package k8s.io/api/scheduling/v1alpha1
go: downloading k8s.io/api v0.36.3
go: github.com/crossplane/cli/v2/internal/project/helm imports
	helm.sh/helm/v3/pkg/action imports
	helm.sh/helm/v3/pkg/kube imports
	k8s.io/kubectl/pkg/cmd/util imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: module k8s.io/api@latest found (v0.36.3), but does not contain package k8s.io/api/scheduling/v1alpha1