You have github.com/containers/image/v5 v5.36.2 in your go.mod. Their README says:

This package was moved; please update your references to use go.podman.io/image/v5 instead. New development of this project happens on https://github.com/containers/container-libs. For more information, check https://blog.podman.io/2025/08/upcoming-migration-of-three-containers-repositories-to-monorepo/.

So you may want to update to the new module path. Dependabot probably cannot figure this out.