build(deps): bump the gomod group with 2 updates

[dependabot]

Bumps the gomod group with 2 updates: github.com/docker/compose/v5 and github.com/sirupsen/logrus.

Updates github.com/docker/compose/v5 from 5.4.0 to 5.5.0

Release notes

Sourced from github.com/docker/compose/v5's releases.

v5.5.0

What's Changed

ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.
Existing containers may be recreated the first time you run compose up after upgrading, as image digests are re-evaluated using the new logic.

compose pull now honors pull_policy refresh windows (daily, weekly, every_N).

✨ Improvements

• New image digest reconciliation process by @​glours & @​ndeloof docker/compose#14011 docker/compose#14041

🐛 Fixes

• Fix(bridge): skip pulling default image references for build-only ser… by @​ericwyles in docker/compose#14010
• Fix(watch): stop pruning every dangling image of the project by @​glours in docker/compose#14012
• Fix(config): resolve service environment when computing --hash by @​glours in docker/compose#14002
• Fix(watch): skip unreadable directories instead of failing the watch by @​Endika in docker/compose#13992
• Fix: ignore one-off container events in up monitor by @​brano-osif in docker/compose#14038
• Fix(bridge): validate arguments of bridge subcommands by @​glours in docker/compose#14003
• Fix(images): tolerate containers whose image record is gone by @​ndeloof in docker/compose#14028

🔧 Internal

• Test: Set stop_signal to SIGTERM in nginx-based services by @​ricardobranco777 in docker/compose#13881
• Chore: inline needlessly extracted single-use helpers by @​ndeloof in docker/compose#14048
• Add ENGINE column driven by label by @​nicksieger in docker/compose#13959

⚙️ Dependencies

• Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @​dependabot[bot] in docker/compose#13999
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @​dependabot[bot] in docker/compose#14009
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by @​dependabot[bot] in docker/compose#14019
• Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by @​dependabot[bot] in docker/compose#14033
• Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by @​dependabot[bot] in docker/compose#14034
• Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by @​dependabot[bot] in docker/compose#14035
• Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by @​dependabot[bot] in docker/compose#14043
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by @​dependabot[bot] in docker/compose#14022
• Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by @​dependabot[bot] in docker/compose#14042
• Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @​dependabot[bot] in docker/compose#14008
• Bump golang to version 1.26.6 by @​glours in docker/compose#14045

New Contributors

• @​ericwyles made their first contribution in docker/compose#14010
• @​Endika made their first contribution in docker/compose#13992
• @​brano-osif made their first contribution in docker/compose#14038

Full Changelog: docker/compose@v5.4.0...v5.5.0

Commits

• 870908c feat(ps): add ENGINE column gated on label presence
• ddc4b04 chore: honest name for navigation-menu resolution, share setServiceScale
• 1e80a09 chore: inline needless single-use helpers
• df094b0 fix(images): tolerate containers whose image record is gone
• 2e0368f bump golang to version 1.26.6
• 7cbcc76 build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0
• 9af7fc6 build(deps): bump github.com/docker/cli
• d348a9f build(deps): bump github/codeql-action/upload-sarif
• de458e3 build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3
• f7585f5 ci: grant actions:write to PR review workflow
• Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

• Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
• Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

• update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.1

Fixes:

• Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
• Allow function-backed implementations of error as field values.

Commits

• 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
• 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
• 5e20694 TextFormatter: cover nil pointer method receivers
• 8312732 update changelog for v1.10.1
• e987a40 Merge pull request #1582 from thaJeztah/panic_handler
• 17d574b TextFormatter: recover panics from Error and String methods
• 134c80f Merge pull request #1579 from thaJeztah/err_handling
• 7350f42 logger: WithError: wrap logger.WithError for consistency
• b3369d2 entry: allow function-backed error fields
• 1080083 Merge pull request #1578 from thaJeztah/err_handling_tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions