GO-2026-6258 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, thanos, cortex...