GO-2026-5074 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...