GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex, pulumi-language-yaml, thanos...