upgrade to latest dependencies (#1990)

bumping knative.dev/caching 41aa68a...ed50a5c:
  > ed50a5c upgrade to latest dependencies (# 922)
bumping github.com/google/go-containerregistry 1e09daa...c195f15:
  > c195f15 deps: bump docker dep (# 1991)
  > c3d1dcc Create `remote.Push` (# 1978)
  > d36047a Restore blind-write to remote.Put (# 1970)
  > 9915a85 Referrer API must return correct Content-Type (# 1968)
  > 1b4e407 Add -O shorthand for --omit-digest-tags to crane. (# 1958)
  > 3764db2 Fix windows race condition when writing image with duplicate layers (# 1921)
  > 39d1148 Add Context support to auth methods (# 1949)
  > ff385a9 feat: mutate platform (# 1919)
  > 98dd3e9 Support podman auth file REGISTRY_AUTH_FILE. (# 1914)
  > 051d642 registry: Implement Range requests for blobs (# 1917)
  > 0309184 Add JSON marshalling funcs for Digest. (# 1915)
  > 8b3c303 Bump golang.org/x/ packages (# 1892)
  > afec664 Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain (# 1815)
  > 8dadbe7 Work around docker v25 tarballs (# 1872)
  > a0658aa Always print pushed digest in crane push (# 1860)
  > 55ffb00 fix: goreleaser config (# 1764)
  > 4fdaa32 feat: allow port and disk path to be overriden (# 1848)
  > ceb0580 feat: implement gc command (# 1811)
  > 5a53a12 tag: add command explanation to the long help (# 1843)
  > c722ce9 fix: mimic oci-layout (# 1810)
  > b2485cb Build releases with Go 1.21 (# 1840)
  > dbcd01c Don't wrap DefaultKeychain with refreshes (# 1791)
  > a748190 Set Content-Length for blob uploads (# 1781)
  > 190ad0e Validate index architectures match children (# 1776)
  > a54d642 fix: pin to goreleaser v1.18 to unblock release (# 1763)
  > ea19b57 Return OCI Index content-type for referrers response (# 1762)
  > b850480 Drop localhost to support crane registry serve in a container (# 1746)
  > fe268b7 Don't try cross-origin mounting against dockerhub (# 1743)
  > 2472cbb Let the filesystem handle atomicity (# 1735)
  > db818dc Use RWLock, limit scope of locking, write digest first (# 1734)
  > 44a6e2e Allow concurrent blob Sets, use RWMutex (# 1733)
  > 9010ce1 Correct crane registry help text (# 1732)
  > 03ad2ac add --blobs-to-disk to 'crane registry serve' (# 1731)
  > 4e4b03a Don't load into daemon if the image already exists (# 1724)
  > 6de8d1d Change ErrSchema1 error to dynamic strings. (# 1721)
  > 0a9bb12 crane: Respect cmd.OutOrStdout (# 1728)
  > 145eebe Add missing name option in crane index commands (# 1723)
  > 037ab31 Surface better error messages in crane index (# 1722)
  > 03b8657 fix: add bounds checking to addendum layer mutations to prevent panic (# 1715)
  > c3f8a49 Pass scopes through crane auth token (# 1713)
  > 53fbcf9 Bump codecov/codecov-action from 3.1.3 to 3.1.4 (# 1710)
  > 1d535e2 Add crane auth token (# 1709)
  > 5fe7f2e Limit size of manifest (# 1711)
  > e61c519 retry HTTP 522 errors by default (# 1707)
  > 2015ceb fixed a goroutine leak (# 1705)
  > 0ec36ad Allow crane to export schema 1 images (# 1704)
  > b7ad3f1 bump deps using ./hack/bump-deps.sh (# 1702)
  > dbecb1d Do not reuse pushers for pullers (# 1701)
  > a927d7c Make 403 non-fatal for manifest existence checks (# 1691)
  > 0b12f56 Add ppc64le to all binaries (# 1688)
  > 69d1a19 Add `mutate` `--ports` option to set the exposed ports (# 1677)
  > 691004b bump deps using ./hack/bump-deps.sh (# 1685)
  > 370e8a5 Fix a few lint issues (# 1684)
  > 3120ba5 Keep order of env in crane mutate (# 1683)
  > afd15f1 Add --all-tags flag to crane cp (# 1682)
  > 5438948 add registry.Repo("foo") (# 1671)
  > 43710a9 Retry without mount if auth fails (# 1681)
  > 3228a60 Add ppc64le to .goreleaser.yml (# 1680)
  > d64f9e0 remove time from random.Image history (# 1678)
  > 3706061 allow pkg/v1/random to accept a RNG source (# 1675)
  > b7c6e9d Fall back to puller if reusing pusher fails (# 1676)
  > 005bb71 Add remote.Reuse for Pusher/Puller (# 1672)
  > 58bd35b Bump codecov/codecov-action from 3.1.2 to 3.1.3 (# 1668)
  > ad695c0 Replace deprecated command with environment file (# 1667)
  > 07c767c Add remote.Puller (# 1644)
  > 9f68710 feat(daemon): generate config file from Docker Engine API (# 1130)
  > d1c4e9f verify provenance (# 1611)
  > df518f9 add crane auth logout (# 1589)
  > 52d59d1 feat(remote): make retryStatusCodes configurable (# 1635)
  > df72a9a crane push: print pushed ref@digest to stdout (# 1663)
  > 27a6ad6 Revert "authn: Add NewConfigKeychain to load a config from explicit path (# 1603)" (# 1664)
  > 217318c deprecate estargz (# 1660)
  > 1cb7e13 authn: Add NewConfigKeychain to load a config from explicit path (# 1603)
  > 348cd86 bump deps using ./hack/bump-deps.sh (# 1659)
  > e055961 Bump peter-evans/create-pull-request from 4 to 5 (# 1642)
  > 6f96bba gcrane: Use page size of 10,000 for googley things (# 1645)
  > 375fb61 Bump slsa-framework/slsa-verifier from 2.1.0 to 2.2.0 (# 1649)
  > 07eb440 Bump codecov/codecov-action from 3.1.1 to 3.1.2 (# 1650)
  > 9aa45a1 Change return type of remote.Referrers (# 1652)
  > bc990d6 Fix fetching referrers error handling (# 1648)
  > ed5c185 Retry net.ErrClosed (# 1637)
  > 2435320 Revert "Cleanup: Switch the debug image to `cgr.dev/chainguard/busybox` (# 1638)" (# 1641)
  > 2ccd41c Cleanup: Switch the debug image to `cgr.dev/chainguard/busybox` (# 1638)
  > 6743ec9 Implement remote.Pusher (# 1633)
  > 0962e29 Allow remote config layers to be lazy fetched (# 1634)
  > 4a79e94 Fix race in stream (# 1632)
  > 65e78dc Add partial.Manifests for lazy index access (# 1631)
  > 0577676 crane: ignore buildx attestations in flatten (# 1630)
  > 93be9c4 Don't export whiteouts for single layers (# 1629)
  > d958444 Add remote.Descriptor.Schema1() (# 1626)
  > aee00b1 Fix race in mutate (# 1627)
  > 6ac92e8 Refactor fetcher, writer, and progress (# 1625)
  > 249d7e1 Refresh authn.DefaultKeychain creds every 5 min (# 1624)
  > b8d1c0a Bump slsa-framework/slsa-verifier from 2.0.1 to 2.1.0 (# 1621)
  > ace7be7 update GCR quotas (# 1619)
  > e2620e5 Actually retry retryable status codes (# 1618)
  > 21ac1b2 Adding `mutate` `--workdir` option to set the working directory (# 1615)
  > 54e3f49 Bump actions/stale from 7 to 8 (# 1616)
  > a34235c Support `Warning` header aggregation and reporting in `crane` (# 1604)
  > 46488f7 retry HTTP 499 errors by default (# 1612)
  > 0f2db49 release: use ko 0.13.0 to build images (# 1607)
  > 53189d3 Bump actions/setup-go from 3 to 4 (# 1602)
  > 01bbd53 Update release.yml (# 1601)
  > 4b081f8 Avoid v1.Manifest in crane edit config (# 1583)
  > 1cfe1fc Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (# 1593)
  > e94d408 bump deps using ./hack/bump-deps.sh (# 1592)
  > ff810c1 crane: add serve subcommand (# 1586)
  > 57f010d replace manual slsa-verifier installation with action (# 1585)
  > 6770304 Update descriptor "data" field (when valid) during "crane edit config" (# 1584)
  > 1b8dc2b Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (# 1580)
  > 8ea5e0e crane: support --omit-digest-tags in crane ls (# 1528)
  > 4e95ae2 crane: add --flatten for index append (# 1566)
  > 4a0e0af docs: Update crane installation and verification instructions (# 1567)
  > 3624968 tarball: pass imageToTags (# 1563)
  > 9f42e02 Set mediaType for empty.ImageIndex in RawManifest (# 1562)
  > 2ceebaa Implement crane index subcommand (# 1561)
  > 9cd098e skip tls verification if default transport is used with insecure option (# 1559)
  > eb7d746 authn: also read mount secrets (# 1560)
  > 62f183e Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (# 1556)
  > b3c23b4 Support for OCI 1.1+ referrers via API (# 1546)
  > de35f0f Allow setting Content-Type in crane edit manifest (# 1551)
  > e04520b fix: Fix the crane release url and add more steps (# 1532)
  > 824efc7 fix(mutate): also set timestamps only present in some formats (# 1550)
  > 061ee6b Support for OCI 1.1+ referrers via fallback tag (# 1543)
  > da1008f Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (# 1548)
  > 86be45f Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (# 1547)
  > 9306eba Allow crane edit to generate non-image artifacts (# 1545)
  > 759b19f Support artifactType, for images whose config.mediaType is not a config (# 1541)
  > 11843ba Enforce proper sha256 usage (# 1544)
  > 76bac93 Update release.yml (# 1540)
  > d872232 hash: use generic instantiation (# 1538)
bumping knative.dev/eventing 5fb693f...4a6e7d2:
  > 4a6e7d2 [main] Upgrade to latest dependencies (# 8444)
bumping knative.dev/serving 9c35416...9be0816:
  > 9be0816 Bump go-containerregistry (# 15751)
  > 220c826 Update net-gateway-api nightly (# 15750)

Signed-off-by: Knative Automation <automation@knative.team>